一句话:提出 Untangle 框架,解耦动态分区的重分区决策与时机,以形式化量化泄漏并指导设计低泄漏高性能方案。
论文关注硬件结构在多个安全域之间动态分区时的性能与安全权衡。动态分区能提升性能,但分区大小变化会泄露信息,因此需要形式化量化泄漏。作者指出这种量化很困难,因为“做出何种重分区决策”与“何时做出决策”相互纠缠。为此,论文提出 Untangle——一个原则性框架,用于解耦并分析这些因素,从而形式化刻画动态分区的泄漏,并指导设计低泄漏、高性能的分区方案。摘要主要阐述问题与动机;标题表明其目标是提供可设计此类方案的方法论,具体技术细节与实验评估在摘要中未展开。
Partitioning a hardware structure dynamically among multiple security domains leaks some information but can deliver high performance. To understand the performance-security tradeoff of dynamic partitioning, it would be useful to formally quantify the leakage of these schemes. Unfortunately, this is hard, as what partition resizing decisions are made and when they are made are entangled.
@inproceedings{paperbot10089,
title = {Untangle: A Principled Framework to Design Low-Leakage, High-Performance Dynamic Partitioning Schemes},
author = {Zirui Neil Zhao and Adam Morrison and Christopher W. Fletcher and Josep Torrellas},
booktitle = {ASPLOS},
year = {2023},
doi = {10.1145/3582016.3582033}
}