ShieldReduce: Fine-Grained Shielded Data Reduction
summary
System design applies Intel SGX enclave to perform deduplication, delta and local compression inside a trusted environment, using a novel bi-directional delta compression and a hybrid inline/offline pipeline. Evaluation on backup traces shows up to 3.5× upload throughput versus a forward-delta baseline, comparable storage savings to plaintext fine-grained reduction, 83.3% fewer enclave crossings, and up to ~3.6× overall space savings; prototype is open source.
AI-written summary · about
chapters (13)
- 0:00Outsourced storage challenges
- 1:21Encrypted deduplication limits
- 2:46Trusted execution for reduction
- 4:11SGX overhead challenges
- 4:55ShieldReduce core techniques
- 6:01Locality for delta compression
- 7:24Bidirectional delta compression
- 9:11Hybrid compression strategy
- 12:01Balancing performance and storage
- 13:25Experimental setup and comparison
- 14:28Storage savings and throughput
- 15:11Enclave efficiency gains
- 16:15Conclusion
related talks
20mSecure and Lightweight Deduplicated Storage via Shielded Deduplication...
15mAccelerating Encrypted Deduplication via SGX
17mLight-Dedup: A Light-weight Inline Deduplication Framework for Non-Volatile...
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
06mSGX-SSD: A Policy-based Versioning SSD with Intel SGX
23mThe Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX
19mRethinking Isolation Mechanisms for Datacenter Multitenancy
20mTiDedup: A New Distributed Deduplication Architecture for Ceph4
