Abstract:As the reliance on secure memory environments permeates across applications, memory encryption is used to ensure memory security. However, most effective encryption schemes, such as the widely used AES-CTR, inherently introduce extra overheads, including those associated with counter storage and version number integrity checks. Moreover, encryption only protects data content, and it does not fully address the memory access pattern leakage. While Oblivious RAM (ORAM) aims to obscure these patterns, its high performance costs hinder practical applications. We introduce Secure Scattered Memory (SSM), an efficient scheme provides a comprehensive security solution that preserves the confidentiality of data content without traditional encryption, protects access patterns, and enables efficient integrity verification. Moving away from traditional encryption-centric methods, SSM offers a fresh approach to protecting data content while eliminating counter-induced overheads. Moreover, SSM is designed to inherently obscure memory access patterns, thereby significantly enhancing the confidentiality of memory data. In addition, SSM incorporates lightweight, thus integrated mechanisms for integrity assurance, protecting against data tampering. We also introduce SSM+, an extension that adapts Path ORAM to offer even greater security guarantees for both data content and memory access patterns, demonstrating its flexibility and efficiency. Experimental results show that SSM incurs only a 10% performance overhead compared to non-protected memory and offers a 15% improvement over AES-CTR mode memory protection. Notably, SSM+ provides an 20% improvement against Path ORAM integrated with Intel SGX under the highest security guarantees.

Off-Chip Memory Encryption and Integrity Protection Based on AES-GCM in Embedded Systems.

Encryption scheme design and implementation of embedded processor off-chip memory access

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

Security Memory System for Mobile Device or Computer Against Memory Attacks

FEDTIC: A Security Design for Embedded Systems with Insecure External Memory

Architecting Non-Volatile Main Memory to Guard Against Persistence-based Attacks

Efficient In-Memory AES Encryption Implementation Using a General Memristive Logic: Surmounting the Data Movement Bottleneck.

A Reconfigurable Permutation Based Address Encryption Architecture for Memory Security

Low-latency DAE: A Configurable Lightweight Hybrid Data and Address Encryption Engine for IoT Real-time NVM Protection

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

A New Secure Memory System for Efficient Data Protection and Access Pattern Obfuscation

An efficient run-time encryption scheme for non-volatile main memory

In-Memory Computing Architecture for Efficient Hardware Security

Low-Latency PAE: Permutation-Based Address Encryption Hardware Engine for IoT Real-Time Memory Protection

Efficient and Lightweight In-memory Computing Architecture for Hardware Security

Authenticated encryption chip implementation against side-channel attack

Hardware-Assisted Monitoring For Instruction Security In Embedded System

Embedding Security into Ferroelectric FET Array via In-Situ Memory Operation

Securing Embedded System from Code Reuse Attacks: A Lightweight Scheme with Hardware Assistance

Fault Attacks on Encrypted General Purpose Compute Platforms