SADRA: Sound Capability-based Access Control System for Resource-Disaggregated Architectures
SADRA enforces SmartNIC capability checks for disaggregated resources at 89.5 Gbit/s with immediate revocation.
SADRA is a capability-based access-control system for resource-disaggregated architectures, where remote memory and accelerators are no longer mediated by the local kernel. Host-isolated SmartNIC hardware checks every inter-node request against the requesting process and again against authoritative resource state. Linked capabilities avoid coordination on the access path, and revocation denies later uses even while remote authorization state is stale. An FPGA prototype sustains 89.5 Gbit/s, near a 90-91 Gbit/s non-enforcing baseline, and cleans a 128-capability subtree in 528 ns; safety properties were proved and model-checked with SPIN.
- SmartNICs check process authority and current resource access state.
- Revocation denies access without waiting for remote cleanup.
- Prototype sustains 89.5 Gbit/s versus a 90-91 Gbit/s baseline.
- A 128-capability subtree cleanup finishes in 528 nanoseconds.
From the original article
1 min read at arxiv.orgResource disaggregation separates memory and accelerators from compute nodes and makes them remotely accessible. This improves resource sharing, but also removes the local kernel from the resource-access path. Under an untrusted host, compromised host software may use stale authority, exceed delegated authority, or reuse authority provisioned for another process.
By Hamed Rasifard · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.