StreamBox-TZ: Secure Stream Analytics at the Edge with TrustZone
Heejin Park, Shuang Zhai, Long Lu, Felix Xiaozhu Lin

TL;DR
StreamBox-TZ is a secure, high-performance stream analytics engine for edge platforms that leverages ARM TrustZone to protect data and computations, enabling verifiable results with minimal overhead.
Contribution
It introduces a TEE-optimized data plane and remote attestation methods for secure, efficient stream analytics at the edge, overcoming TEE constraints.
Findings
Processes up to 140 MB/sec of input data
Adds only 42.5 KB to the TCB
Security overhead is less than 25%
Abstract
While it is compelling to process large streams of IoT data on the cloud edge, doing so exposes the data to a sophisticated, vulnerable software stack on the edge and hence security threats. To this end, we advocate isolating the data and its computations in a trusted execution environment (TEE) on the edge, shielding them from the remaining edge software stack which we deem untrusted. This approach faces two major challenges: (1) executing high-throughput, low-delay stream analytics in a single TEE, which is constrained by a low trusted computing base (TCB) and limited physical memory; (2) verifying execution of stream analytics as the execution involves untrusted software components on the edge. In response, we present StreamBox-TZ (SBT), a stream analytics engine for an edge platform that offers strong data security, verifiable results, and good performance. SBT contributes a data…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Cloud Data Security Solutions · Distributed systems and fault tolerance
