Скачать или смотреть sRDMA - Efficient NIC-based Authentication and Encryption for Remote Direct Memory Access

Speaker: Konstantin Taranov

Conference: ATC'20

Abstract: State-of-the-art remote direct memory access (RDMA) techologies have shown to be vulnerable against attacks by in-network adversaries, as they provide only a weak form ofprotection by including access tokens in each message. Anetwork eavesdropper can easily obtain sensitive informationand modify bypassing packets, affecting not only secrecy butalso integrity. Tampering with packets can have drastic con-sequences. For example, when memory pages with code arechanged remotely, altering packet contents enables remotecode injection. We propose sRDMA, a protocol that providesefficient authentication and encryption for RDMA to preventinformation leakage and message tampering. sRDMA usessymmetric cryptography and employs network interface cardsto perform cryptographic operations. Additionally, we provide an implementation for sRDMA using programmablenetwork adapters