The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866913493164228608 |
|---|---|
| author | Zhang, Chuqi Zeng, Jun Zhang, Yiming Ahmad, Adil Zhang, Fengwei Jin, Hai Liang, Zhenkai |
| author_facet | Zhang, Chuqi Zeng, Jun Zhang, Yiming Ahmad, Adil Zhang, Fengwei Jin, Hai Liang, Zhenkai |
| contents | Protecting system observability records (logs) from compromised OSs has gained significant traction in recent times, with several note-worthy approaches proposed. Unfortunately, none of the proposed approaches achieve high performance with tiny log protection delays. They also leverage risky environments for protection (\eg many use general-purpose hypervisors or TrustZone, which have large TCB and attack surfaces). HitchHiker is an attempt to rectify this problem. The system is designed to ensure (a) in-memory protection of batched logs within a short and configurable real-time deadline by efficient hardware permission switching, and (b) an end-to-end high-assurance environment built upon hardware protection primitives with debloating strategies for secure log protection, persistence, and management. Security evaluations and validations show that HitchHiker reduces log protection delay by 93.3--99.3% compared to the state-of-the-art, while reducing TCB by 9.4--26.9X. Performance evaluations show HitchHiker incurs a geometric mean of less than 6% overhead on diverse real-world programs, improving on the state-of-the-art approach by 61.9--77.5%. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2409_04484 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches Zhang, Chuqi Zeng, Jun Zhang, Yiming Ahmad, Adil Zhang, Fengwei Jin, Hai Liang, Zhenkai Cryptography and Security Operating Systems Protecting system observability records (logs) from compromised OSs has gained significant traction in recent times, with several note-worthy approaches proposed. Unfortunately, none of the proposed approaches achieve high performance with tiny log protection delays. They also leverage risky environments for protection (\eg many use general-purpose hypervisors or TrustZone, which have large TCB and attack surfaces). HitchHiker is an attempt to rectify this problem. The system is designed to ensure (a) in-memory protection of batched logs within a short and configurable real-time deadline by efficient hardware permission switching, and (b) an end-to-end high-assurance environment built upon hardware protection primitives with debloating strategies for secure log protection, persistence, and management. Security evaluations and validations show that HitchHiker reduces log protection delay by 93.3--99.3% compared to the state-of-the-art, while reducing TCB by 9.4--26.9X. Performance evaluations show HitchHiker incurs a geometric mean of less than 6% overhead on diverse real-world programs, improving on the state-of-the-art approach by 61.9--77.5%. |
| title | The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches |
| topic | Cryptography and Security Operating Systems |
| url | https://arxiv.org/abs/2409.04484 |