ACME: Advanced Counter Mode Encryption for Secure Non-Volatile Memories

• Published in: 2018 55th ACM ESDA IEEE Design Automation Conference (DAC) pp. 1 - 6
• Main Authors: Swami, Shivam, Mohanram, Kartik
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.06.2018
• Subjects: Benchmark testing; Counter Mode Encryption; Denial of Memory Service; Encryption; Memory management; Non-volatile Memories; Nonvolatile memory; Phase Change Memory; Random access memory; System-on-chip
• DOI: 10.1109/DAC.2018.8465906

Modern computing systems that integrate emerging non-volatile memories (NVMs) are vulnerable to classical security threats to data confidentiality (e.g., stolen DIMM and bus snooping attacks) as well as new security threats to system availability (e.g., denial of memory service (DoMS) attacks). Although counter mode encryption (CME) secures NVM-based main memories against confidentiality attacks, counter sizing is critical to balance tradeoffs between memory overhead, system performance, and re-encryption frequency (i.e., system availability). Furthermore, CME is particularly vulnerable to DoMS attacks, where a malicious application can severely impact memory availability by forcing frequent full memory re-encryption. This paper proposes Advanced Counter Mode Encryption, i.e., ACME, a low overhead CME-based main memory encryption solution to realize the twin security goals of confidentiality and availability in NVM-based main memories. At its core, ACME integrates counter write leveling (CWL) to reduce the frequency of full memory re-encryption while preserving the security properties of the underlying CME. Our evaluations on a phase change memory (PCM) architecture using SPEC CPU2006 benchmarks show that for a system availability of 99.999%, ACME not only requires 50% lower counter overhead, but also improves system performance by 20% in comparison to classical CME. When subject to a DoMS attack in the form of an unprivileged Linux process that sidesteps all levels of cache to constantly write to the same memory address to precipitate counter overflow, the ACME-based system provides 99.9% system availability in contrast to a classical CME-based system that is rendered non-operational.