SGX-SSD: A Policy-based Versioning SSD with Intel SGX

TL;DR

SGX-SSD is a novel versioning SSD system leveraging Intel SGX to securely manage file history based on customizable policies, preventing data tampering and optimizing storage for important files.

Contribution

The paper introduces SGX-SSD, a secure, policy-based versioning SSD that uses Intel SGX to protect version management from high-privileged malware.

Findings

Secure file history management using SGX-based policy system

Selective data preservation improves storage efficiency

Ensures integrity of critical files against tampering

Abstract

This paper demonstrates that SSDs, which perform device-level versioning, can be exposed to data tampering attacks when the retention time of data is less than the malware's dwell time. To deal with that threat, we propose SGX-SSD, a SGX-based versioning SSD which selectively preserves file history based on the given policy. The proposed system adopts Intel SGX to implement the version policy management system that is safe from high-privileged malware. Based on the policy, only the necessary data is selectively preserved in SSD that prevents files with less priority from wasting space and also ensures the integrity of important files.