Avocado: A Secure In-Memory Distributed Storage System
summary
Avocado is a secure in‑memory distributed key‑value store that uses Intel SGX to run the replication protocol inside enclaves, splits keys (in‑enclave) and encrypted values (host memory) to avoid EPC paging, and implements a secure packet format plus eRPC and DPDK to avoid frequent enclave transitions. It runs a multi‑writer ABD-style replication inside TEEs, claims confidentiality/integrity/freshness with fewer replicas than BFT, shows ~2× security overhead versus native and is 4.5× to 65× faster than BFT on YCSB workloads.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:20Distributed in-memory KVS
- 0:43Trust in cloud storage
- 1:13Problem statement
- 2:05Basic design
- 3:11Trusted computing
- 3:48Design challenges
- 4:55Networking
- 5:57Trusted network stack
- 7:21Fault tolerance
- 8:08Trusted replication protocol
- 9:25Hardware limitations
- 10:01In-memory KV store
- 11:04Overall system design
- 11:45Evaluation
- 12:12Overall performance
- 13:03Scalability
- 13:28Avocado: A secure in-memory distributed storage system
related talks
17mAtomicDisk: A Secure Virtual Disk for TEEs against Eviction Attacks
44mAdvancements in Confidential Computing
19mCoSMIX: A Compiler-based System for Secure Memory Instrumentation and Execution in Enclaves
18mEthane: An Asymmetric File System for Disaggregated Persistent Memory
25mSplitting Secrets for Encrypted Backups
46mOpen for AI: Secure paths to data collaboration volume and diversity
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...
35mVeracruz: Privacy-preserving mutliparty computation using trusted hardware