Abstract:Privileged malware neutralizes software-based versioning systems and destroys data. To counter this threat, a versioning solid-state drive (SSD) that performs versioning inside the SSD has been studied. An SSD is a suitable candidate for data versioning because it can preserve previous versions without additional copying, and provide high security with a very small trusted computing base (TCB). However, the versioning SSDs studied so far commonly use a full disk versioning method that preserves all file versions in a batch. This paper demonstrates that SSDs, which provide full disk versioning, can be exposed to data tampering attacks when the retention time of data is less than the malware's dwell time. To deal with this threat, we propose SGX-SSD, a policy-based per-file versioning SSD to keep a deeper history for only the important files of users. However, since the SSD isn't aware of a file semantic, and the versioning policy information should be securely received from the untrusted host computer, implementing the per-file versioning in SSD is a huge challenge. To solve this problem, SGX-SSD utilizes the Intel SGX and has a secure host interface to securely receive policy information (configuration values) from the user. Also, to solve the file semantic unawareness problem of the SSD, a piggyback module is designed to give a file hint at the host layer, and an algorithm for selective versioning based on the policy is implemented in the SSD. To prove our system, we prototyped SGX-SSD the Jasmine OpenSSD platform in Linux environment. In the experimental evaluation, we proved that SGX-SSD provides strong security with little additional overhead for selective per-file versioning.

Design and Implementation of Encrypted Solid State Disk Integrated with Hardware Encryption

Design and Implementation of a SATA Bridge with Configurable Encryption Algorithm

Implementation and Simulation of AES Encryption Algorithm based on FPGA

Design of High-speed Solid State Drive in FPGA

TrustedSSD:New Foundation for Big Data Security

Hardware/Software Design of NAND Flash Controller for a New Generation of Smart Storage SoC

Active Ssd Design For Energy-Efficiency Improvement Of Web-Scale Data Analysis

Encryption scheme design and implementation of embedded processor off-chip memory access

Hardware Implementation of Encryption Algorithm Using USB and FPGA

An Adaptive Technique using Advanced Encryption Standard to Implement Hard Disk Security

A New Multi-Tiered Solid State Disk Using Slc/Mlc Combined Flash Memory

A Policy-based Versioning SSD with Intel SGX

A High-performance Open-channel Open-way NAND Flash Controller Architecture

Gemini: A Novel Hardware and Software Implementation of High-performance PCIe SSD

Fast Low Level Disk Encryption Using FPGAs

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

A High Performance Encryption System Based on AES Algorithm with Novel Hardware Implementation

RSSD: Defend against Ransomware with Hardware-Isolated Network-Storage Codesign and Post-Attack Analysis

The Design and Implementation of a Block Cipher ASIC

The Hardware Implementation of 8-Channel Flash Controller for Solid-State Disk Application

From Ideal to Practice: Data Encryption in eADR-based Secure Non-Volatile Memory Systems