← 研踪 PaperTrailarXiv:2610.38602 · v1
STAR: Scalable TEE-based Anonymous Rate-limiter
首次提交 2026-10-28 18:26
版本更新 2026-10-28 18:26
雷达观测 2026-10-30 10:22
摘要
Protecting Internet services from attacks such as TLS/HTTP floods requires rate limiting, yet identifying users to enforce these limits can compromise their privacy. Anonymous rate limiting promises to reconcile these goals, but existing schemes either struggle to scale or assume that services and authorities do not collude. We present STAR, which uses server-side trusted execution environments (TEEs) to overcome these limitations. By enabling lightweight cryptographic operations, TEEs make authentication efficient, but introduce a privacy challenge: malicious services can observe memory-access patterns to infer user secrets. We address this threat through countermeasures against secret-dependent memory accesses and assess our implementation using dynamic analysis. To extend these efficiency gains across servers, we also design a secure sharding mechanism that distributes client requests. We demonstrate that strong privacy guarantees can coexist with efficient authentication at scale; STAR processes authentication requests in tens of microseconds and handles approximately 13.9K requests per second per CPU core.
观测到的版本
相邻记录可能跳过中间版本；首次发现 v2 及以上也会标为版本更新。
v1 · 2026-10-28 18:26 · 最新观测版本
STAR: Scalable TEE-based Anonymous Rate-limiter
Protecting Internet services from attacks such as TLS/HTTP floods requires rate limiting, yet identifying users to enforce these limits can compromise their privacy. Anonymous rate limiting promises to reconcile these goals, but existing schemes either struggle to scale or assume that services and authorities do not collude. We present STAR, which uses server-side trusted execution environments (TEEs) to overcome these limitations. By enabling lightweight cryptographic operations, TEEs make authentication efficient, but introduce a privacy challenge: malicious services can observe memory-access patterns to infer user secrets. We address this threat through countermeasures against secret-dependent memory accesses and assess our implementation using dynamic analysis. To extend these efficiency gains across servers, we also design a secure sharding mechanism that distributes client requests. We demonstrate that strong privacy guarantees can coexist with efficient authentication at scale; STAR processes authentication requests in tens of microseconds and handles approximately 13.9K requests per second per CPU core.
查看此版本解读 →查看此版本原文 ↗