As the reliance on secure memory environments permeates across applications, memory encryption is used to ensure memory security. However, most effective encryption schemes, such as the widely used AES-CTR, inherently introduce extra overheads, including those associated with counter storage and version number integrity checks. Moreover, encryption only protects data content, and it does not fully address the memory access pattern leakage. While Oblivious RAM (ORAM) aims to obscure these patterns, its high performance costs hinder practical applications. We introduce Secure Scattered Memory (SSM), an efficient scheme provides a comprehensive security solution that preserves the confidentiality of data content without traditional encryption, protects access patterns, and enables efficient integrity verification. Moving away from traditional encryption-centric methods, SSM offers a fresh approach to protecting data content while eliminating counter-induced overheads. Moreover, SSM is designed to inherently obscure memory access patterns, thereby significantly enhancing the confidentiality of memory data. In addition, SSM incorporates lightweight, thus integrated mechanisms for integrity assurance, protecting against data tampering. We also introduce SSM+, an extension that adapts Path ORAM to offer even greater security guarantees for both data content and memory access patterns, demonstrating its flexibility and efficiency. Experimental results show that SSM incurs only a 10% performance overhead compared to non-protected memory and offers a 15% improvement over AES-CTR mode memory protection. Notably, SSM+ provides an 20% improvement against Path ORAM integrated with Intel SGX under the highest security guarantees.

翻译：随着对安全存储环境的依赖渗透到各类应用中，内存加密被用于保障存储安全。然而，大多数高效的加密方案（如广泛使用的AES-CTR）本质上会引入额外开销，包括计数器存储和版本号完整性校验等。此外，加密仅能保护数据内容，无法完全解决内存访问模式泄露问题。尽管不透明随机访问存储器（ORAM）旨在混淆这些模式，但其高昂的性能成本阻碍了实际应用。我们提出安全分散存储（SSM），这是一种高效方案，在无需传统加密的前提下提供数据内容机密性保护、访问模式防护以及高效完整性验证的全面安全解决方案。SSM摒弃了以加密为核心的传统方法，提供全新思路来保护数据内容，同时消除计数器引发的开销。此外，SSM被设计为天然隐藏内存访问模式，从而显著增强内存数据的机密性。同时，SSM集成轻量级完整性保证机制，可抵御数据篡改。我们还提出SSM+扩展方案，通过适配路径ORAM（Path ORAM）为数据内容和内存访问模式提供更强的安全保证，展现了其灵活性与高效性。实验结果表明，与未受保护的内存相比，SSM仅带来10%的性能开销，并比AES-CTR模式内存保护方案提升15%的性能。值得注意的是，在最高安全保障下，SSM+相较于集成英特尔SGX的路径ORAM实现了20%的性能提升。