NDLI: True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (SIGP, Vol. 51, Issue. 4)

Content Provider	ACM Digital Library
Author	Tsafrir, Dan Markuze, Alex Morrison, Adam
Abstract	Malicious I/O devices might compromise the OS using DMAs. The OS therefore utilizes the IOMMU to map and unmap every target buffer right before and after its DMA is processed, thereby restricting DMAs to their designated locations. This usage model, however, is not truly secure for two reasons: (1) it provides protection at page granularity only, whereas DMA buffers can reside on the same page as other data; and (2) it delays DMA buffer unmaps due to performance considerations, creating a vulnerability window in which devices can access in-use memory. We propose that OSes utilize the IOMMU differently, in a manner that eliminates these two flaws. Our new usage model restricts device access to a set of shadow DMA buffers that are never unmapped, and it copies DMAed data to/from these buffers, thus providing sub-page protection while eliminating the aforementioned vulnerability window. Our key insight is that the cost of interacting with, and synchronizing access to the slow IOMMU hardware---required for zero-copy protection against devices---make copying preferable to zero-copying. We implement our model in Linux and evaluate it with standard networking benchmarks utilizing a 40,Gb/s NIC. We demonstrate that despite being more secure than the safest preexisting usage model, our approach provides up to 5x higher throughput. Additionally, whereas it is inherently less scalable than an IOMMU-less (unprotected) system, our approach incurs only 0%--25% performance degradation in comparison.
Starting Page	249
Ending Page	262
Page Count	14
File Format	PDF
ISSN	03621340 15581160
DOI	10.1145/2954679.2872379
Journal	ACM SIGPLAN Notices (SIGP)
Volume Number	51
Issue Number	4
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1983-05-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Dma attacks Iommu
Content Type	Text
Resource Type	Article
Subject	Computer Graphics and Computer-Aided Design Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (CARN, Vol. 44, Issue. 2)

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (OPSR, Vol. 50, Issue. 2)

True IOMMU Protection from DMA Attacks: When Copy is Faster than Zero Copy

Systematic protection mechanism design (SIGP, Vol. 17, Issue. 4)

High Performance Packet Processing with FlexNIC (SIGP, Vol. 51, Issue. 4)

ANVIL:Software-Based Protection Against Next-Generation Rowhammer Attacks (SIGP, Vol. 51, Issue. 4)

Scaling up Superoptimization (SIGP, Vol. 51, Issue. 4)

Macaroni is better than spaghetti (SIGP, Vol. 12, Issue. 8)

PIFT:Predictive Information-Flow Tracking (SIGP, Vol. 51, Issue. 4)

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (SIGP, Vol. 51, Issue. 4)

Similar Documents

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (CARN, Vol. 44, Issue. 2)

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (OPSR, Vol. 50, Issue. 2)

True IOMMU Protection from DMA Attacks: When Copy is Faster than Zero Copy

Systematic protection mechanism design (SIGP, Vol. 17, Issue. 4)

High Performance Packet Processing with FlexNIC (SIGP, Vol. 51, Issue. 4)

ANVIL:Software-Based Protection Against Next-Generation Rowhammer Attacks (SIGP, Vol. 51, Issue. 4)

Scaling up Superoptimization (SIGP, Vol. 51, Issue. 4)

Macaroni is better than spaghetti (SIGP, Vol. 12, Issue. 8)

PIFT:Predictive Information-Flow Tracking (SIGP, Vol. 51, Issue. 4)

True IOMMU Protection from DMA Attacks:When Copy is Faster than Zero Copy (SIGP, Vol. 51, Issue. 4)