针对Hash树方法校验存储器完整性代价大的问题,提出了一种新的基于Hash树的检验方法——变长存储块Hash树(VB-HTree)方法。它基于程序访问的局部性特征,按存储块的访问频率将存储器划分为热访问区和冷访问区。在热访问区设置较小尺寸的存储块,在冷访问区设置较大尺寸的存储块,分别建立不同的Hash树。在可信的片内存储区保存Hash树的根结点,以此校验不可信外部内存的数据完整性。对操作代价进行了较为详细的分析,并开展了模拟实验。分析和模拟结果表明,VB-HTree方法优于传统的Hash树方法.是一种可行的内存完整性校验方案。
Focusing on the high verification overhead of the conventional Hash tree approach for verification of memory integrity, the paper proposes a new Hash tree based scheme, the variable Block size Hash tree (VB-HTree) method. Based on the locality character of program accessing, the method divides the main memory into the hot access area and the cold access area according to the access frequency of memory blocks. In the hot access area, smaller memory blocks are set, and bigger memory blocks are set in the cold access area, and then two different Hash trees are setup respectively. The root nodes of the two Hash trees are saved in the trusted on-chip storage to verify the integrity of the untrusted external memory. The operation overhead of this method was analyzed in detail and the simulation experiments on it were carried out. The analysis and the simulation results indicate that the scheme proposed is superior to the traditional Hash tree scheme and it is a feasible scheme for memory integrity verification.