RollSec: Automatically Secure Software States Against General Rollback

Dai, Weiqi; Du, Yao; Jin, Hai; Wang, Qiang; Zou, Deqing; Xu, Shouhuai; Liu, Zhongze

doi:10.1007/s10766-017-0523-0

Cited by 2 publications

(1 citation statement)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Otherwise, it will cause that the state of vTPM and VM is inconsistent. This feature provides a great convenience for users, but it also means that the VM environment of a cloud platform is different from the physical machine [13,32,45]. For the SvTPM, adversaries may use the rollback function to threaten the password security of the SvTPM.…”

Section: Rollback Attacks To Vtpmmentioning

confidence: 99%

SvTPM: A Secure and Efficient vTPM in the Cloud

Wang,

Fan,

Wang

et al. 2019

Preprint

View full text Add to dashboard Cite

Virtual Trusted Platform Modules (vTPMs) have been widely used in commercial cloud platforms (e.g. Google Cloud, VMware Cloud, and Microsoft Azure) to provide virtual root-of-trust for virtual machines. Unfortunately, current state-of-the-art vTPM implementations are suffering from confidential data leakage and high performance overhead. In this paper, we present SvTPM, a secure and efficient software-based vTPM implementation based on hardwarerooted Trusted Execution Environment (TEE), providing a whole life cycle protection of vTPMs in the cloud. SvTPM offers strong isolation protection, so that cloud tenants or even cloud administrators cannot get vTPM's private keys or any other sensitive data. In SvTPM, we identify and solve a couple of critical security challenges for vTPM protection with SGX, such as NVRAM replacement attack, rollback attacks, trust establishment, and a fine-grained trusted clock. We implement a prototype of SvTPM on both QEMU and KVM. Performance evaluation results show that SvTPM achieves orders of magnitude of performance gains comparing to the vTPMs protected with physical TPM. The launch time of SvTPM is 2600× faster than vTPMs built upon hardware TPM. In the micro-benchmarks evaluation, we find that the command execution latency of SvTPM is smaller than or equal to the existing schemes.

show abstract

Section: Rollback Attacks To Vtpmmentioning

confidence: 99%