2017/01/04 by Marcus Brandenburger, Christian Cachin, Brandenburger, Marcus +5 · 1 citation
Computer Science · #Cloud Computing and Resource Management #Cloud Data Security Solutions #Distributed #Distributed systems and fault tolerance #FOS: Computer and information sciences #Parallel #Security and Verification in Computing #and Cluster Computing (cs.DC)
paper · pdf · doi:10.48550/arxiv.1701.00981
openalex publication_date 2017/01/04 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Novel hardware-aided trusted execution environments, as provided by Intel's\nSoftware Guard Extensions (SGX), enable to execute applications in a secure\ncontext that enforces confidentiality and integrity of the application state\neven when the host system is misbehaving. While this paves the way towards\nsecure and trustworthy cloud computing, essential system support to protect\npersistent application state against rollback and forking attacks is missing.\n In this paper we present LCM - a lightweight protocol to establish a\ncollective memory amongst all clients of a remote application to detect\nintegrity and consistency violations. LCM enables the detection of rollback\nattacks against the remote application, enforces the consistency notion of\nfork-linearizability and notifies clients about operation stability. The\nprotocol exploits the trusted execution environment, complements it with simple\nclient-side operations, and maintains only small, constant storage at the\nclients. This simplifies the solution compared to previous approaches, where\nthe clients had to verify all operations initiated by other clients. We have\nimplemented LCM and demonstrated its advantages with a key-value store\napplication. The evaluation shows that it introduces low network and\ncomputation overhead; in particular, a LCM-protected key-value store achieves\n0.72x - 0.98x of a SGX-secured key-value store throughput.\n