On Scalable Integrity Checking for Secure Cloud Disks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Burke, Quinn, Sheatsley, Ryan, King, Rachel, Hines, Owen, Swift, Michael, McDaniel, Patrick
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916588240764928
author Burke, Quinn
Sheatsley, Ryan
King, Rachel
Hines, Owen
Swift, Michael
McDaniel, Patrick
author_facet Burke, Quinn
Sheatsley, Ryan
King, Rachel
Hines, Owen
Swift, Michael
McDaniel, Patrick
contents Merkle hash trees are the standard method to protect the integrity and freshness of stored data. However, hash trees introduce additional compute and I/O costs on the I/O critical path, and prior efforts have not fully characterized these costs. In this paper, we quantify performance overheads of storage-level hash trees in realistic settings. We then design an optimized tree structure called Dynamic Merkle Trees (DMTs) based on an analysis of root causes of overheads. DMTs exploit patterns in workloads to deliver up to a 2.2x throughput and latency improvement over the state of the art. Our novel approach provides a promising new direction to achieve integrity guarantees in storage efficiently and at scale.
format Preprint
id arxiv_https___arxiv_org_abs_2405_03830
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle On Scalable Integrity Checking for Secure Cloud Disks
Burke, Quinn
Sheatsley, Ryan
King, Rachel
Hines, Owen
Swift, Michael
McDaniel, Patrick
Cryptography and Security
Merkle hash trees are the standard method to protect the integrity and freshness of stored data. However, hash trees introduce additional compute and I/O costs on the I/O critical path, and prior efforts have not fully characterized these costs. In this paper, we quantify performance overheads of storage-level hash trees in realistic settings. We then design an optimized tree structure called Dynamic Merkle Trees (DMTs) based on an analysis of root causes of overheads. DMTs exploit patterns in workloads to deliver up to a 2.2x throughput and latency improvement over the state of the art. Our novel approach provides a promising new direction to achieve integrity guarantees in storage efficiently and at scale.
title On Scalable Integrity Checking for Secure Cloud Disks
topic Cryptography and Security
url https://arxiv.org/abs/2405.03830