2.RISC-V软硬协同安全隔离：蓬莱实践.pdf

1、Security Isolation of RISC-V A Case Study of PenglaiYubin XiaProfessor,Shanghai Jiao Tong University2025.7The need for isolation 2A problem with a clogged toilet cannot affect the missile-launching subsystem.Operating systems do not have this kind of isolation between components.(2006)Andrew Tanenba

2、umIsolation is a Major Source of Security Tax3ContainerGuest OSVMMNested VMMTEEAcc CtrlApp6-layerOSAcc CtrlAppContainerOSAcc CtrlAppContainerGuest OSVMMAcc CtrlAppContainerGuest OSVMMNested VMMAcc CtrlAppOSApp5-layer4-layer3-layer2-layer1-layerApp+OS0-layerSWHWCloudVisorCloud computingThe last defen

3、se lineDOSKernel+ShellUnixLinuxSecurity&performance,hard to get bothLinux:Performance is Degrading4Caused by“Security Tax”1.KPTI2.No speculation for indirect branch3.SLAB free list randomization4.Strengthen user-space memcpyLatency of poll()up to 146%Source:SOSP19 An Analysis of Performance Evolutio

4、n of Linuxs Core OperationsThe performance degradation of different Linux versionUKUUKExample:KPTI1.Defend Meltdown attack in 20182.Performance drop up to 30%Trend:New HW Isolation FeaturesMajor CPU vendors have new featuresIntels new features in last 8 years are more than the sum of previous 49 yea

5、rs5CPUSecurity Features after 2015IntelSGX,TME,MPK,MPX,TDX,AMDSME,SEV,SEV-ES,SNP,ARMTME,PA,Bowmore,CCA,RISC-VPMP,sPMP,ePMP,IOPMP,1 New RequirementsCloud,big data,mobile computingTraditional software solution is hardto fit new requirements2 Better Know-howA lot of CVEs and quantitativeanalysis Know w

6、hat to do in HW3 More Software-definedMany security features are usingsoftware(firmware or microcode)CPU can be patched as softwareHW/SW Co-design will bring more oppotunitiesHW/SW1：How can OS fit HW better?2：How can HW fit OS better?Trusted Execution Environment for Isolation1.TEE protects trusted