MI6: Secure Enclaves in a Speculative Out-of-Order Processor
Name
1812.09822.pdf
Description
Submitted version
Size
865.33 KB
Format
Adobe PDF
Checksum (MD5)
dd49d010b61604c82c572d5e8a1d3860
Author(s)
Bourgeat, Thomas
Lebedev, Ilia A.
Wright, Andrew D.
Zhang, Sizhuo
Arvind
Devadas, Srinivas
Date Issued
October 2019
Journal
Proceedings of the 52nd Annual IEEE/ACM International Symposium on Microarchitecture
Publisher
Association for Computing Machinery (ACM)
Citation
Bourgeat, Thomas et al. “MI6: Secure Enclaves in a Speculative Out-of-Order Processor.” Paper presented at the Proceedings of the 52nd Annual IEEE/ACM International Symposium on Microarchitecture, Columbus OH, October 2019, Association for Computing Machinery: 42–56 © 2019 The Author(s)
Version
Original manuscript
Abstract
Recent attacks have broken process isolation by exploiting microarchitectural side channels that allow indirect access to shared microarchitectural state. Enclaves strengthen the process abstraction to restore isolation guarantees. We propose MI6, an aggressively speculative out-of-order processor capable of providing secure enclaves under a threat model that includes an untrusted OS and an attacker capable of mounting any software attack currently considered practical, including those utilizing control flow mis-speculation. MI6 is inspired by Sanctum [16] and extends its isolation guarantee to more realistic memory hierarchy. It also introduces a purge instruction, which is used only when a secure process is (de)scheduled, and implements it for a complex processor microarchitecture. We model the performance impact of enclaves in MI6 through FPGA emulation on AWS F1 FPGAs by running SPEC CINT2006 benchmarks as enclaves within an untrusted Linux OS. Security comes at the cost of approximately 16.4% average slowdown for protected programs.
MIT Department
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1145/3352460.3358310
