题名: | Leveraging Intel SGX Technology to Protect Security Sensitive Applications. |
作者: | Sobchuk, J. M.; O'Melia, S. R.; Utin, D. M.; Khazan, R. I. |
关键词: | Reliability, Cryptography, Computer programs, Software development, Debugging, Operating systems, Computer programming, Cloud computing, Sgx(software guard extensions), Mee(memory encryption engine), Dram(main memory), Vmm(virtual machine monitor), Tcb(trusted computing base) |
摘要: | This report explains the basic process by which Intel Software Guard Extensions (SGX) can be leveraged into an existing codebase to protect a security-sensitive application. Intel SGX provides user-level applications with hardware-enforced confidentiality and integrity protections. These protections apply to all three phases of the operational data lifecycle: at rest, in use, and in transit. SGX shrinks the trusted computing base (and therefore the attack surface) of the application to only the hardware on the CPU chip and the portion of the applications software that is executed within the protected enclave. The SGX SDK enables relatively straightforward integration into existing C/C++ codebases while still ensuring program support for legacy and non-Intel platforms. |
报告类型: | 科技报告 |