기본 정보
연구 분야
프로젝트
발행물
구성원
article|
인용수 7
·2019
ZeroKernel: Secure Context-isolated Execution on Commodity GPUs
Ohmin Kwon, Yonggon Kim, Jaehyuk Huh, Hyunsoo Yoon
IF 7.5IEEE Transactions on Dependable and Secure Computing
초록

In the last decade, the dedicated graphics processing unit (GPU) has emerged as an architecture for high-performance computing workloads. Recently, researchers have also focused on the isolation property of a dedicated GPU and suggested GPU-based secure computing environments with several promising applications. However, despite the security analysis conducted by the prior studies, it has been unclear whether a dedicated GPU can be leveraged as a secure processor in the presence of a kernel-privileged attacker. In this paper, we first demonstrate the security of dedicated GPUs through comprehensive studies on context information for GPU execution. The paper shows that a kernel-privileged attacker can manipulate the GPU contexts to redirect memory accesses or execute arbitrary GPU codes on the running GPU kernel. Based on the security analysis, this paper proposes a new on-chip execution model for the dedicated GPU and a novel defense mechanism supporting the security of the on-chip execution. With comprehensive evaluation, the paper assures that the proposed solutions effectively isolate sensitive data in on-chip storages and defend against known attack vectors from a privileged attacker, supporting that the commodity GPUs can be leveraged as a secure processor.

키워드
Computer scienceKernel (algebra)Context (archaeology)CUDAGraphics processing unitGeneral-purpose computing on graphics processing unitsCoprocessorGraphicsParallel computingOperating system
타입
article
IF / 인용수
7.5 / 7
게재 연도
2019