Communication Dans Un Congrès Année : 2025

TruShare: Confidential Key-Value Store for Untrusted Environments

TruShare: base de données clé-valeur confidentielle pour environnements non-fiable

Résumé

Key-Value Stores (KVSs), commonly used for storing sensitive data, face significant security challenges when deployed in untrusted cloud environments. These environments are susceptible to various types of attacks exploiting a compromised OS or running a side-channel attacks. To protect sensitive data from these types of attacks distributed TEE-based KVSs have been proposed. However, these solutions are still vulnerable to side channel attacks that may compromise any node and leak all its data at once. Active defense mechanisms against side channel attacks, such as Oblivious RAM, are impractical to deploy due to their significant performance overhead or the requirement for additional hardware (e.g., FPGA). Consequently, these defense mechanisms are often skipped in favor of performance in most existing TEE-based KVSs, which weakens their security. To address this issue, we present TruShare, a practical distributed in-memory KVS that integrates TEEs (Intel SGX) and Shamir Secret Sharing (SS) to provide security against highprivileged spywares while tolerating side-channel attacks on a fraction of storage nodes, without requiring costly active defense mechanisms. We implemented TruShare and evaluated its performance using 25 Microsoft Azure VMs. Compared to its closest competitors, TruShare considers a stronger threat model while providing more practical performance than solutions relying on active defense mechanisms against side-channel attacks.
Fichier principal
Vignette du fichier
_EDCC_final__TruShare__Trusted_Secret_Sharing_based_Key_Value_Store (1).pdf (1) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04935076 , version 1 (10-02-2025)

Identifiants

  • HAL Id : hal-04935076 , version 1

Citer

Aghiles Ait Messaoud, Sonia Ben Mokhtar, Anthony Simonet-Boulogne. TruShare: Confidential Key-Value Store for Untrusted Environments. 20th European Dependable Computing Conference (EDCC '25), Apr 2025, Lisbon, Portugal. ⟨hal-04935076⟩
0 Consultations
0 Téléchargements

Partager

More