Storage Device Latency Uniformity Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The limited PCIe interface capacity leads to congestion, causing information leakage due to transmission delays, especially when peripheral devices saturate the link capacity, compromising data security and integrity.
Innovation Solution
A method involving a storage device that detects attacks by analyzing latency uniformity among read commands, adjusts latency based on service policies, and communicates attack detection or latency adjustments using In-Band and Out-Of-Band communication to identify and respond to malicious activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If PCIe link capacity is saturated to increase peripheral device connectivity, then more devices can be connected, but transmission delay occurs causing information leakage
Solution Approach 1:
An I/O switch is introduced as an intermediary device between the host and multiple peripheral devices, allowing devices to share the limited PCIe interface capacity. The switch manages traffic flow and arbitration, enabling multiple devices to connect while mitigating transmission delays through intelligent routing and queue management.
Solution Approach 2:
The PCIe interface capacity is segmented and distributed among multiple peripheral devices through the I/O switch. Each device receives allocated bandwidth and time slots, preventing saturation-induced delays by dividing the shared resource into manageable portions for different devices.
2Quantity of substance
If PCIe traffic from peripheral devices saturates link capacity, then device connectivity is maximized, but data security is compromised due to information leakage
Solution Approach 1:
The system implements feedback mechanisms where the I/O switch and host monitor PCIe traffic patterns, latency variations, and transmission characteristics. When abnormal patterns indicating potential information leakage are detected, the system can adjust traffic management policies, throttle suspicious devices, or alert security systems to maintain data security.
Solution Approach 2:
The I/O switch acts as a security intermediary that inspects and controls traffic between peripheral devices and the host. It can filter malicious traffic, enforce access control policies, and prevent information leakage by monitoring transmission patterns and blocking suspicious communications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method includes: receiving, by for example a storage device (440), a plurality of read commands generated by a tenant from a host (410); calculating, based on the plurality of read commands satisfying a predetermined condition, each latency of the plurality of read commands and obtaining the calculated plurality of latencies; calculating a uniformity of the plurality of latencies; and determining, based on the uniformity that is within a predetermined ratio range, that there is an attack from the tenant.