Security-enhanced live migration based on SGX for virtual machine

The virtual machine may face the problem of information leakage in live migration.Therefore,a dynamic memory protection technique SGX was introduced and a security enhancement live migration method based on KVM environment was proposed.Firstly,on both sides of migration,a hardware-isolated secure execution environment centered SGX was built.It guaranteed the security of operations like encryption and integrity measurement and also ensured the security of private data.An encrypted channel to transfer migration data based on the remote attestation between the secure execution environments of both migration sides was constructed.And the mutual authentication of both sides’ platform integrity was realized.Finally,the security enhancement effect and did the experiment was analyzed.The results shows that the introduction of SGX won’t cause much negative effect to the migration performance.     

A Distributed Privacy Preservation Approach for Big Data in Public Health Emergencies Using Smart Contract and SGX

Security and privacy issues have become a rapidly growing problem with the fast development of big data in public health. However, big data faces many ongoing serious challenges in the process of collection, storage, and use. Among them, data security and privacy problems have attracted extensive interest. In an effort to overcome this challenge, this article aims to present a distributed privacy preservation approach based on smart contracts and Intel Software Guard Extensions (SGX). First of all, we define SGX as a trusted edge computing node, design data access module, data protection module, and data integrity check module, to achieve hardware-enhanced data privacy protection. Then, we design a smart contract framework to realize distributed data access control management in a big data environment. The crucial role of the smart contract was revealed by designing multiple access control contracts, register contracts, and history contracts. Access control contracts provide access control methods for different users and enable static access verification and dynamic access verification by checking the user’s properties and history behavior. Register contract contains user property information, edge computing node information, the access control and history smart contract information, and provides functions such as registration, update, and deletion. History contract records the historical behavior information of malicious users, receives the report information of malicious requestors from the access control contract, implements a misbehavior check method to determines whether the requestor has misbehavior, and returns the corresponding result. Finally, we design decentralized system architecture, prove the security properties, and analysis to verify the feasibility of the system. Results demonstrate that our method can effectively improve the timeliness of data, reduce network latency, and ensure the security, reliability, and traceability of data.     

A novel automated magnetic resonance image segmentation approach based on elliptical gamma mixture model for breast lumps detection

This article introduces a novel semisupervised automated segmentation approach for breast magnetic resonance (MR) image on multicore CPU-GPU systems. The basic idea of the proposed method is clustering-based semisupervised classifier devised by elliptical gamma mixture model (EGMM). Parameters of EGMM are identified by the iterative log-expectation maximization (EM) algorithm. The suggested classifier labels the groups of voxels in an input image first and then classifies the image slices using the EGMM. Two different implementations of the proposed algorithm have been developed based on two different types of high-performance computing architectures such as graphics processing units (GPUs) and multicore processors. To realize the real-time segmentation performance of our algorithm with two distinctive architecture, we have tested a set of breast MR images collected from MedPix. Comparison between two architectures in terms of segmentation performance and computational cost is assessed by the analysis of simulation and experimental results.     

Pentium 4主板设计

介绍了基于Intel850芯片组架构的Pentium4主板设计，针对Rambus布线规范，分析了高速、高集成硬件的一些电气设计及注意事项.     

Intel XScale处理器应用程序编写和优化

本文在介绍了Intel XScale嵌入式处理器特性的基础上，提出嵌入式系统设计中需要进行优化的三个目标——速度、空间和功耗，分析了三个目标之间的相互关系，并研究了针对XScale处理器进行优化的几种方法，取得了满意的效果。     

基于虚拟机的虚拟实验网络

讲述了一个虚拟实验网络构建的全过程,探讨了虚拟实验网络应用在计算机网络实验教学中的可行性和必要性。     

基于IntelPXA255图像采集压缩与传输

介绍一种在Imel xscale PXA255平台和嵌入式Linux系统下利用USB摄像头进行图像采集压缩及传输的方法.硬件设计中简要介绍所用到的器件;软件设计给出设计思路、算法流程图;最后给出部分测试结果.     

数字化汽车传感器的研究

为了将汽车模拟传感器输出的信号转换为数字信号,采用了V/F转换器与M C U接口的方法,并通过I2C总线协议,对传感器数据进行传输.试验表明,本文所述的传感器数字化方法可行,适应在汽车控制系统中应用.     

应用内存超售在虚拟化环境中优化SGX的性能

随着安全性在云计算中越来越受到关注,英特尔自2015年起提出了SGX。它提供enclave,并保护enclave中的应用程序免受不信任的软件(包括客户操作系统和虚拟机监视器)和硬件(英特尔CPU包除外)的攻击。然而,SGX只能支持256MB的enclave内存EPC。因此,在不同的虚拟机之间高效分配宝贵的EPC资源对整体性能至关重要。但是,现有的SGX内存虚拟化软件(例如官方的英特尔SGX SDK)只能在虚拟机之间静态地划分EPC资源,这显然与虚拟机的动态EPC要求不匹配。为此,提出了SGX内存超售的设计,可以显著提高SGX应用在虚拟机中的性能,与现有的静态分区方法相比,我们的设计可取得高达49.2%的性能提升。     

基于嵌入式Linux的网络设备驱动设计与实现

主要介绍Intel PXA255平台网络设备驱动的软硬件设计和实现方案,分析了嵌入式Linux下网络设备驱动的一般特性与编程要点,阐述了网络设备驱动如何处理数据的发送、接收、超时等相应事件,并简要介绍了网卡驱动与上层协议之间的交互。分别利用系统测试和应用测试验证该设计方案,结果表明网卡驱动能够很好地实现网络包数据的传输,达到较快的速度和较高的稳定性。