Logo: to the web site of Uppsala University

uu.sePublications from Uppsala University
System disruptions
There are recurring service disruptions on some of the search portals due to high traffic. We are working to resolve the issue, you may temporarily encounter an error message.
Change search
ExportLink to record
Permanent link

Direct link
BETA

Project

Project type/Form of grant
Project grant
Title [sv]
Hacka inte mitt minne: Mot effektivt och heltäckande minnesskydd
Title [en]
Don’t hack my memory: Towards efficient, ubiquitous memory protection
Abstract [sv]
Vikten av informationssäkerhet ökar i relevans: Samhälle, vetenskap, regering och våra vardagliga liv är beroende av digital information lagrad sammankopplade system. Idag, mer än någonsin, är det av fundamental vikt att förstärka säkerheten i hårdvaran själv för att skydda hemligheter som inte får läcka. I synnerhet är skydd av minne genom kryptering kritiskt. Den närstående expansionen i användning av icke-volatila minnen (NVM) medför att en stor mängd känslig data kommer att ligga oskyddat i det icke-volatila minnet hos oräkneliga enheter, även när dessa enheter stängs av. Tyvärr medför skydd av minne höga kostnader i prestanda och energi som överstiger en hasighetsavmattning på 3 gångers! Överdrivet höga kostnader begränsar skyddat minne inte bara till en specialiserad roll i högprestandaarkitekturer utan gör det också ohållbart för energi- och prestandakänsliga implementationer, som edge computing, mobila och Internet-of-Things-enheter (IoT).Under de senaste 15 åren har skyddat minne gått från grundläggande principer till att ha kommersiell status. Ändå är det tydligt demonstrerat att dess implementation är omåttligt dyr avseende både energi och prestanda. Det här förslaget ämnar ta itu med detta känsliga område ur ett arkitektoniskt perspektiv: vad kan vi göra på den datorarkitektoniska nivån för att göra skyddat minne högeffektivt? Detta är ett gryende forskningsområde inom datorarkitektur som lovar signifikanta belöningar om vi kan komma på innovativa lösningar. Förslaget utforskar arkitektoniska tekniker för att förbättra kostnaden av att skydda minne, med det slutgiltiga målet att göra minnesskydd tillgängligt för en bredare samling system och användningsområden. I detta avseende ämnar detta förslag att: i) reducera kostnaden av minnesskydd på den arkitektoniska nivån och ii) utforska alternativa sätt att uppnå sekretess och integritet hos minnen som är anpassade för det inbäddade/IoT-designområdet.
Abstract [en]
The most secure execution environment offered by hardware is encapsulated in the concept of a “Secure enclave”: a collection of techniques developed over the past 15 years, by seminal contributions in the security field, to safely encrypt program, memory, and execution.  This proposal focuses on memory protection that is becoming more critical as with the expansion of Non-Volatile memory technologies, a large amount of sensitive information is left exposed in mobile or Internet-of-Things devices, even when they are switched off. Today, implementations of a small set of fundamental concepts for secure , protected memory are commercially available but it is widely recognized that they come at a great performance and energy cost (e.g., over 3× slowdowns). For this reason, the applicability of memory protection is limited and reserved for specialized situations.This proposal aims to address this critical deficiency by exploring a range of architectural techniques to ameliorate the cost of protecting memory, with an ultimate goal of making memory protection accessible to a wider range of systems and applications. To this end, this proposal aims to: i) reduce the cost of memory protection by innovating in security-aware, efficiency-enhancing architectural techniques and ii) explore alternative approaches to memory confidentiality and integrity, tailored for the embedded/IoT design space.
Publications (2 of 2) Show all publications
Asgharzadeh, A., Feliu, J., Acacio, M. E., Kaxiras, S. & Ros, A. (2025). No Rush in Executing Atomic Instructions. In: 2025 IEEE International Symposium on High Performance Computer Architecture (HPCA): . Paper presented at 2025 International Symposium on High Performance Computer Architecture - HPCA-Annual, March 1-5, 2025, Las Vegas, NV, USA (pp. 1618-1630). Institute of Electrical and Electronics Engineers (IEEE)
Open this publication in new window or tab >>No Rush in Executing Atomic Instructions
Show others...
2025 (English)In: 2025 IEEE International Symposium on High Performance Computer Architecture (HPCA), Institute of Electrical and Electronics Engineers (IEEE), 2025, p. 1618-1630Conference paper, Published paper (Refereed)
Abstract [en]

Hardware atomic instructions are the building blocks of the synchronization algorithms. Historically, to guarantee atomicity and consistency, they were implemented using memory fences, committing older memory instructions, and draining the store buffer before initiating the execution of atomics. Unfortunately, the use of such memory fences entails huge performance penalties as it implies execution serialization, thus impeding instruction- and memory-level parallelism.

The situation, however, seems to have changed recently. Through experiments on x86 machines, we discovered that current x86 processors manage to comply with the x86-TSO requirements while avoiding the performance overhead introduced by fences (fence-free or unfenced implementation). This paves the way to new potential optimizations to atomic instruction execution. In particular, our simulation experiments modeling unfenced atomics reveal that executing atomic instructions as soon as their operands are ready does not always lead to optimal performance. In fact, this increases the time that other threads should wait to obtain the cacheline. In contended scenarios, delaying the execution of the atomic instruction to minimize the time the cacheline is locked provides superior performance.

Based on this observation, we present Rush or Wait (RoW), a hardware mechanism to decide when to execute an atomic instruction. The mechanism is based on a contention predictor that estimates if an atomic will access a contended cacheline. Non-contended atomics execute once their operands are ready. Contended atomics, on the contrary, wait to become the oldest memory instruction and to drain the store buffer to execute, minimizing the contention on the accessed cacheline. Our experimental evaluation shows that RoW reduces execution time on average by 9.2% (and up to 43%) compared to a baseline that executes atomics as soon as the operands are ready, and yet it requires a small area overhead (64 bytes).

Place, publisher, year, edition, pages
Institute of Electrical and Electronics Engineers (IEEE), 2025
Series
International Symposium on High-Performance Computer Architecture - Proceedings, ISSN 1530-0897, E-ISSN 2378-203X
National Category
Computer Systems Computer Sciences Computer Engineering
Identifiers
urn:nbn:se:uu:diva-565455 (URN)10.1109/HPCA61900.2025.00120 (DOI)001494383800112 ()2-s2.0-105003405961 (Scopus ID)979-8-3315-0648-3 (ISBN)979-8-3315-0647-6 (ISBN)
Conference
2025 International Symposium on High Performance Computer Architecture - HPCA-Annual, March 1-5, 2025, Las Vegas, NV, USA
Funder
EU, Horizon 2020, 819134Swedish Research Council, 2022-04959Swedish Foundation for Strategic Research, FUS21-0067
Available from: 2025-08-21 Created: 2025-08-21 Last updated: 2025-08-21Bibliographically approved
Aligholipour, R., Aimoniotis, P., Kaxiras, S. & Yao, Y. (2025). RXT: RefleXive Address Translation for Pointer-Chasing Workloads. In: 2025 IEEE International Parallel and Distributed Processing Symposium (IPDPS): . Paper presented at International Symposium on Parallel and Distributed Processing (IPDPS), 3-7 June, 2025, Milano, Italy (pp. 1062-1073). Institute of Electrical and Electronics Engineers (IEEE)
Open this publication in new window or tab >>RXT: RefleXive Address Translation for Pointer-Chasing Workloads
2025 (English)In: 2025 IEEE International Parallel and Distributed Processing Symposium (IPDPS), Institute of Electrical and Electronics Engineers (IEEE), 2025, p. 1062-1073Conference paper, Published paper (Refereed)
Abstract [en]

With increasingly irregular memory access patterns in Indirect Memory Access (IMA) and Graph Processing (GP) applications, Virtual Address Translation (VAT) not only has become a major performance bottleneck, but also a key contributor to high power consumption in out-of-order (OoO) multi-core processor pipeline. We find that this problem can be attributed to a large extent to an inefficient utilization of TLBs in pointer-chasing instructions (i.e. load-to-load), which constitute a significant portion of workloads in IMA/GP. Conventionally, VATs for pointer-chasing are performed via a series of TLB look-ups: one for each load in the pointer chain. However, this approach is sub-optimal as it overlooks the correlations between pointers, missing opportunities to perform VATs through more costeffective calculations instead of relying on the more expensive TLB look-ups. This work draws on the insight that in pointer-chasing workloads, the physical page holding an upstream pointer is often at a fixed distance to the physical page where a downstream pointer resides. Building on this insight, we introduce RefleXive address Translation (RXT), which encodes the physical page distance (termed PageDist) between an upstream and downstream pointer into the unused upper 16 bits of the upstream pointer's virtual address. Consequently, RXT can compute the translation of a pointer by directly adding the PageDist to its residing address (the physical address where the pointer is stored). This process can be recursively applied throughout the pointer-chasing sequence, transforming address translation from a sequence of TLB accesses to computes. Through gem5 full-system simulation, RXT reduces TLB energy consumption for pointer-chasing applications by an average of 41.48 % (up to 62.50 %) and decreases overall core power density by 4.65 % (up to 13.09 %), without compromising application execution time. In fact, RXT even improves program runtime by an average of 0.71 % (up to 2.09 %).

Place, publisher, year, edition, pages
Institute of Electrical and Electronics Engineers (IEEE), 2025
Series
IEEE International Parallel and Distributed Processing Symposium, ISSN 1530-2075, E-ISSN 1530-2075
Keywords
Virtual address translation, indirect memory access, graph applications
National Category
Computer Systems
Identifiers
urn:nbn:se:uu:diva-575490 (URN)10.1109/IPDPS64566.2025.00098 (DOI)001552207700090 ()979-8-3315-3237-6 (ISBN)979-8-3315-3238-3 (ISBN)
Conference
International Symposium on Parallel and Distributed Processing (IPDPS), 3-7 June, 2025, Milano, Italy
Available from: 2026-01-12 Created: 2026-01-12 Last updated: 2026-02-10Bibliographically approved
Principal InvestigatorKaxiras, Stefanos
Coordinating organisation
Uppsala University
Funder
Period
2023-01-01 - 2026-12-31
National Category
Computer Engineering
Identifiers
DiVA, id: project:8928Project, id: 2022-04959_VR

Search in DiVA

Computer Engineering

Search outside of DiVA

GoogleGoogle Scholar