论文标题
胡桃木：低信任触发动作平台
Walnut: A low-trust trigger-action platform
论文作者
论文摘要
触发功能平台是一种将IoT设备与Web服务连接的新型系统。例如，流行的IFTTT平台可以将Fitbit与Google日历连接起来，以根据睡眠历史添加睡前提醒。但是，这些平台在公共云基础架构上运行并计算敏感用户数据时会出现机密性和完整性风险。本文介绍了核桃的设计，实现和评估，核桃是一个低信任触发器平台，模仿IFTTT的功能，同时以低资源成本确保数据的机密性和计算的正确性。核桃的关键推动剂是一种新的两党安全计算协议，该协议有效地执行字符串替换，这是扳机功能平台工作负载中的一个常见计算，（ii）对来自不同供应商的异质性可信赖的硬件机器进行复制计算，以确保计算能够长期输出到达机器的正确性。对胡桃木的评估表明，相对于非安全基线的可靠性可部署性和低价间接费用 - CPU的3.6倍，而网络中的4.3倍除了一小部分程序外，其他所有程序中都有4.3倍。
Trigger-action platforms are a new type of system that connect IoT devices with web services. For example, the popular IFTTT platform can connect Fitbit with Google Calendar to add a bedtime reminder based on sleep history. However, these platforms present confidentiality and integrity risks as they run on public cloud infrastructure and compute over sensitive user data. This paper describes the design, implementation, and evaluation of Walnut, a low-trust trigger-action platform that mimics the functionality of IFTTT, while ensuring confidentiality of data and correctness of computation, at a low resource cost. The key enabler for Walnut is a new two-party secure computation protocol that (i) efficiently performs strings substitutions, which is a common computation in trigger-action platform workloads, and (ii) replicates computation over heterogeneous trusted-hardware machines from different vendors to ensure correctness of computation output as long as one of the machines is not compromised. An evaluation of Walnut demonstrates its plausible deployability and low overhead relative to a non-secure baseline--3.6x in CPU and 4.3x in network for all but a small percentage of programs.
