VC3: Trustworthy Data Analytics in the Cloud Using SGX. We present VC3, the first system that allows users to run distributed MapReduce computations in the cloud while keeping their code and data secret, and ensuring the correctness and completeness of their results. VC3 runs on unmodified Hadoop, but crucially keeps Hadoop, the operating system and the hyper visor out of the TCB, thus, confidentiality and integrity are preserved even if these large components are compromised. VC3 relies on SGX processors to isolate memory regions on individual computers, and to deploy new protocols that secure distributed MapReduce computations. VC3 optionally enforces region self-integrity invariants for all MapReduce code running within isolated regions, to prevent attacks due to unsafe memory reads and writes. Experimental results on common benchmarks show that VC3 performs well compared with unprotected Hadoop: VC3’s average runtime overhead is negligible for its base security guarantees, 4.5% with write integrity and 8% with read/write integrity.
Keywords for this software
References in zbMATH (referenced in 4 articles )
Showing results 1 to 4 of 4.
- Toffalini, Flavio; Graziano, Mariano; Conti, Mauro; Zhou, Jianying: SnakeGX: a sneaky attack against SGX enclaves (2021)
- Feng, Jun; Yang, Laurence T.; Gati, Nicholaus J.; Xie, Xia; Gavuna, Benard S.: Privacy-preserving computation in cyber-physical-social systems: a survey of the state-of-the-art and perspectives (2020)
- Harris, William R.; Jha, Somesh; Reps, Thomas W.; Seshia, Sanjit A.: Program synthesis for interactive-security systems (2017)
- Pass, Rafael; Shi, Elaine; Tramèr, Florian: Formal abstractions for attested execution secure processors (2017)