Search papers, labs, and topics across Lattice.
This paper introduces ShieldFS, a POSIX-compliant filesystem designed to secure persistent storage in confidential computing environments by ensuring end-to-end integrity and freshness without requiring modifications to applications. The system employs succinct cryptographic commitments to represent permissible filesystem states, which are maintained within Trusted Execution Environments (TEEs) and verified during reads to thwart rollback, replay, and equivocation attacks. Evaluation results demonstrate that ShieldZFS, an implementation of ShieldFS based on ZFS, achieves strong integrity guarantees while maintaining performance on par with leading filesystems.
ShieldFS ensures that even untrusted storage can maintain integrity and freshness, effectively countering attacks that exploit cloud provider vulnerabilities.
Confidential computing protects applications inside Trusted Execution Environments (TEEs), but it leaves storage vulnerable. Even with disk encryption, a malicious cloud provider can roll back, replay, fork, or tamper with disk state, breaking the integrity and freshness guarantees required by stateful applications. Existing solutions either assume trusted storage, incur high overheads, or push integrity logic into applications. We present ShieldFS, a POSIX-compliant filesystem that provides end-to-end integrity and freshness for persistent storage in the confidential-computing threat model without requiring application changes. ShieldFS represents permissible filesystem states using succinct cryptographic commitments, maintained inside TEEs and replicated in a lightweight trusted registry. On-disk data structures, including a write-ahead log and a storage pool, are authenticated using hash chains and an embedded Merkle tree. ShieldFS utilizes transactions and copy-on-write to update persistent filesystem state and commitments atomically. The commitments are verified during reads, ensuring that rollback, replay, and equivocation attacks are detected even when the entire I/O stack is untrusted. We implement the design by extending ZFS, yielding ShieldZFS. Evaluation with standard filesystem benchmarks and real-world workloads shows that ShieldZFS provides strong integrity and freshness guarantees with performance comparable to state-of-the-art filesystems.
Microsoft Research