FASTEN: An FPGA-based Secure System for Big Data Processing

Boeui Hong, Han Yee Kim, Minsu Kim, Taeweon Suh, Weidong Shi, Taeweon Suh

Research output: Contribution to journalArticle

Abstract

Security is a major concern in adopting cloud computing especially for processing private and/or sensitive data. FASTEN is an FPGA-based secure system for processing big data. It leverages the security features in modern FPGAs such as crypto engines and PUF. In FASTEN, the kernel functions for data processing are translated into hardware using a High Level Synthesis and are executed inside the FPGA fabric. Thus, the plaintext data and security keys are not exposed to main memory and secondary storage, keeping security-critical data from malicious insiders and outsiders. We have constructed a 24-node cluster using Zynq-7000 FPGA-SoCs, and conducted the performance evaluation with K-means, LWLR, and Sobel filter applications using Hadoop MapReduce on Linux. Experiment outcomes and security analysis reveal that the FASTEN provides both performance and security advantages over the system with Hadoop’s native security support, at the expense of additional hardware.

Original languageEnglish
JournalIEEE Design and Test
DOIs
Publication statusAccepted/In press - 2017 Aug 18

Fingerprint

Field programmable gate arrays (FPGA)
Hardware
Cloud computing
Processing
Engines
Data storage equipment
Big data
Experiments

Keywords

  • Big Data
  • Cloud computing
  • Cloud Computing
  • Encryption
  • Field programmable gate arrays
  • FPGA
  • Hadoop MapReduce
  • Hardware
  • Public key
  • Security

ASJC Scopus subject areas

  • Software
  • Hardware and Architecture
  • Electrical and Electronic Engineering

Cite this

FASTEN : An FPGA-based Secure System for Big Data Processing. / Hong, Boeui; Kim, Han Yee; Kim, Minsu; Suh, Taeweon; Shi, Weidong; Suh, Taeweon.

In: IEEE Design and Test, 18.08.2017.

Research output: Contribution to journalArticle

Hong, Boeui ; Kim, Han Yee ; Kim, Minsu ; Suh, Taeweon ; Shi, Weidong ; Suh, Taeweon. / FASTEN : An FPGA-based Secure System for Big Data Processing. In: IEEE Design and Test. 2017.
@article{c5ee028ef4914f519fa2114337a88c3b,
title = "FASTEN: An FPGA-based Secure System for Big Data Processing",
abstract = "Security is a major concern in adopting cloud computing especially for processing private and/or sensitive data. FASTEN is an FPGA-based secure system for processing big data. It leverages the security features in modern FPGAs such as crypto engines and PUF. In FASTEN, the kernel functions for data processing are translated into hardware using a High Level Synthesis and are executed inside the FPGA fabric. Thus, the plaintext data and security keys are not exposed to main memory and secondary storage, keeping security-critical data from malicious insiders and outsiders. We have constructed a 24-node cluster using Zynq-7000 FPGA-SoCs, and conducted the performance evaluation with K-means, LWLR, and Sobel filter applications using Hadoop MapReduce on Linux. Experiment outcomes and security analysis reveal that the FASTEN provides both performance and security advantages over the system with Hadoop’s native security support, at the expense of additional hardware.",
keywords = "Big Data, Cloud computing, Cloud Computing, Encryption, Field programmable gate arrays, FPGA, Hadoop MapReduce, Hardware, Public key, Security",
author = "Boeui Hong and Kim, {Han Yee} and Minsu Kim and Taeweon Suh and Weidong Shi and Taeweon Suh",
year = "2017",
month = "8",
day = "18",
doi = "10.1109/MDAT.2017.2741464",
language = "English",
journal = "IEEE Design and Test",
issn = "2168-2356",
publisher = "IEEE Computer Society",

}

TY - JOUR

T1 - FASTEN

T2 - An FPGA-based Secure System for Big Data Processing

AU - Hong, Boeui

AU - Kim, Han Yee

AU - Kim, Minsu

AU - Suh, Taeweon

AU - Shi, Weidong

AU - Suh, Taeweon

PY - 2017/8/18

Y1 - 2017/8/18

N2 - Security is a major concern in adopting cloud computing especially for processing private and/or sensitive data. FASTEN is an FPGA-based secure system for processing big data. It leverages the security features in modern FPGAs such as crypto engines and PUF. In FASTEN, the kernel functions for data processing are translated into hardware using a High Level Synthesis and are executed inside the FPGA fabric. Thus, the plaintext data and security keys are not exposed to main memory and secondary storage, keeping security-critical data from malicious insiders and outsiders. We have constructed a 24-node cluster using Zynq-7000 FPGA-SoCs, and conducted the performance evaluation with K-means, LWLR, and Sobel filter applications using Hadoop MapReduce on Linux. Experiment outcomes and security analysis reveal that the FASTEN provides both performance and security advantages over the system with Hadoop’s native security support, at the expense of additional hardware.

AB - Security is a major concern in adopting cloud computing especially for processing private and/or sensitive data. FASTEN is an FPGA-based secure system for processing big data. It leverages the security features in modern FPGAs such as crypto engines and PUF. In FASTEN, the kernel functions for data processing are translated into hardware using a High Level Synthesis and are executed inside the FPGA fabric. Thus, the plaintext data and security keys are not exposed to main memory and secondary storage, keeping security-critical data from malicious insiders and outsiders. We have constructed a 24-node cluster using Zynq-7000 FPGA-SoCs, and conducted the performance evaluation with K-means, LWLR, and Sobel filter applications using Hadoop MapReduce on Linux. Experiment outcomes and security analysis reveal that the FASTEN provides both performance and security advantages over the system with Hadoop’s native security support, at the expense of additional hardware.

KW - Big Data

KW - Cloud computing

KW - Cloud Computing

KW - Encryption

KW - Field programmable gate arrays

KW - FPGA

KW - Hadoop MapReduce

KW - Hardware

KW - Public key

KW - Security

UR - http://www.scopus.com/inward/record.url?scp=85028505015&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85028505015&partnerID=8YFLogxK

U2 - 10.1109/MDAT.2017.2741464

DO - 10.1109/MDAT.2017.2741464

M3 - Article

AN - SCOPUS:85028505015

JO - IEEE Design and Test

JF - IEEE Design and Test

SN - 2168-2356

ER -