Problem
Research questions and friction points this paper is trying to address.
Persistent Key-Value Stores
Disaggregated Data Centers
Integrity
Freshness
Security
ANCHOR: A Vision for Secure Persistent Key-Value Stores in Disaggregated Data Centers
🤖 AI Summary
ANCHOR提出了一种保障分散式持久键值存储中数据完整性和新鲜度的方法，通过加密、认证及可信执行环境策略来抵御网络攻击和内部威胁。
📝 Abstract
Persistent key-value stores (PKVS) are increasingly deployed in disaggregated settings that split compute, memory, and storage across separate server pools. This shift redraws the trust boundary: data that would remain within a single machine is now transported, cached, and rewritten across multiple hosts, expanding exposure to both network attackers and intra-infrastructure adversaries.
This paper presents ANCHOR, a vision for end-to-end integrity and freshness in disaggregated PKVS. ANCHOR proposes a two-part semantics-aware architecture: 1) Persistence path: ANCHOR outlines encrypting and authenticating PKVS persistent files and preventing rollback with manifest versioning. 2) Volatile path: ANCHOR treats caches, indexes, and filters as untrusted hints unless accompanied by verifiable provenance, enforced by a TEE-resident policy. Finally, we outline key invariants and discuss enclave-friendly batching and asynchronous I/O to amortize verification without undermining disaggregation's performance and elasticity benefits.
Innovation
Methods, ideas, or system contributions that make the work stand out.
end-to-end integrity
semantics-aware architecture
manifest versioning
verifiable provenance
enclave-friendly batching
🔎 Similar Papers
No similar papers found.
