Visible to the public Sego: Pervasive Trusted Metadata for Efficiently Verified Untrusted System Services

TitleSego: Pervasive Trusted Metadata for Efficiently Verified Untrusted System Services
Publication TypeConference Paper
Year of Publication2016
AuthorsKwon, Youngjin, Dunn, Alan M., Lee, Michael Z., Hofmann, Owen S., Xu, Yuanzhong, Witchel, Emmett
Conference NameProceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems
Conference LocationNew York, NY, USA
ISBN Number978-1-4503-4091-5
Keywordsapplication protection, crash consistency, Human Behavior, para-verification, Pervasive computing, pubcrawl, Resiliency, Scalability, virtualization-based security

Sego is a hypervisor-based system that gives strong privacy and integrity guarantees to trusted applications, even when the guest operating system is compromised or hostile. Sego verifies operating system services, like the file system, instead of replacing them. By associating trusted metadata with user data across all system devices, Sego verifies system services more efficiently than previous systems, especially services that depend on data contents. We extensively evaluate Sego's performance on real workloads and implement a kernel fault injector to validate Sego's file system-agnostic crash consistency and recovery protocol.

Citation Keykwon_sego:_2016