Presentation
SIGN IN TO VIEW THIS PRESENTATION Sign In
Securing HDF5 Plugins with Digital Signatures
DescriptionHDF5 is a popular data management and I/O library used by numerous scientific and industry applications. HDF5 in the recent years pluggable extensions to enhance HDF5’s functionality to improve performance and to utilize underlying hardware and file systems. Plugins play a crucial role in adding custom features, such as compression filters, virtual file drivers (VFDs), and virtual object layer (VOL) connectors, without requiring extensive changes to the source code or modifications to the main library. While the plugin capability gives power to extend HDF5, plugins could be misused for malicious routing of HDF5 calls. To improve the security of HDF5 systematically, in this study, we explore the option of digitally signing plugins. This would help ensure the authenticity and integrity of any plugins that users may use. We discuss a few implementation scenarios in HDF5 and assess the accuracy and overhead associated with the plugin verification process.
