发布求助
文献互助 智能选刊 最新文献

Proceedings of the 6th Workshop on System Software for Trusted Execution最新文献

筛选
英文 中文
Towards Modular Trusted Execution Environments 迈向模块化可信执行环境
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593037
C. Weinhold, N. Asmussen, Diana Göhringer, M. Roitzsch
{"title":"Towards Modular Trusted Execution Environments","authors":"C. Weinhold, N. Asmussen, Diana Göhringer, M. Roitzsch","doi":"10.1145/3578359.3593037","DOIUrl":"https://doi.org/10.1145/3578359.3593037","url":null,"abstract":"State-of-the-art implementations of Trusted Execution Environments (TEEs) present system designers and users with several problems: First, it is not possible to choose a TEE implementation independently from the instruction set architecture. Second, the security-critical functionality of such TEEs is deeply integrated into the micro-architecture of complex processor cores, making programs running in such TEEs vulnerable to side-channel attacks. And third, the interface and execution model of certain types of TEEs make it hard to integrate these TEEs with the system software. To address these issues, we propose a modular TEE design. We apply this modular design to the M3 hardware/software co-design platform and demonstrate how TEE support can be made a first-class feature at the system-architecture level.","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131357329","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
About Time: On the Challenges of Temporal Guarantees in Untrusted Environments 关于时间:非可信环境下时间保证的挑战
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593038
F. Alder, Gianluca Scopelliti, Jo Van Bulck, J. Mühlberg
{"title":"About Time: On the Challenges of Temporal Guarantees in Untrusted Environments","authors":"F. Alder, Gianluca Scopelliti, Jo Van Bulck, J. Mühlberg","doi":"10.1145/3578359.3593038","DOIUrl":"https://doi.org/10.1145/3578359.3593038","url":null,"abstract":"Measuring the passage of time and taking actions based on such measurements is a common security-critical operation that developers often take for granted. When working with confidential computing, however, temporal guarantees become more challenging due to trusted execution environments residing in effectively untrusted environments, which can oftentimes influence expectations on time and progress. In this work, we identify and categorize five different levels of tracking the passage of time that an enclave may be able to mesure or receive from its environment. Focusing first on the popular Intel SGX architecture, we analyze what level of time is possible and how this is utilized in both academia and industry projects. We then broaden the scope to other popular trusted computing solutions and list common applications for each level of time, concluding that not every use case requires an accurate access to real-world time.","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"14 1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115298498","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
What virtualization can do for maintenance: the HSM case 虚拟化可以为维护做些什么:HSM案例
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593035
Adrian Leren, Uwe Hildebrand, Kai Lampka
{"title":"What virtualization can do for maintenance: the HSM case","authors":"Adrian Leren, Uwe Hildebrand, Kai Lampka","doi":"10.1145/3578359.3593035","DOIUrl":"https://doi.org/10.1145/3578359.3593035","url":null,"abstract":"In the automotive sector, one easily looks into two decades of software maintenance at the vehicle level. During this time, either the processor-specific version of the potentially complex operating system (OS) kernel in use has to be patched or completely exchanged. To eliminate this maintenance effort, the presented work exploits device virtualization by using the Secure Monitor Call (SMC) interface of ARM [6] and the microkernel-based virtualization scheme of L4Re [2, 3] in its commercial variant EB corbos Hypervisor [1]. This is an alternative to the common approach based on Virtio [8].","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130929692","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Transparent Management of BFT Systems with TEE 基于TEE的BFT系统的透明管理
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593041
Bijun Li, Pierre-Louis Aublin
{"title":"Transparent Management of BFT Systems with TEE","authors":"Bijun Li, Pierre-Louis Aublin","doi":"10.1145/3578359.3593041","DOIUrl":"https://doi.org/10.1145/3578359.3593041","url":null,"abstract":"Achieving distribution transparency is an important goal in distributed system development since it ensures a positive user experience for end-users. In our previous research, we utilized the Intel SGX Trusted Execution Environment (TEE) to facilitate trusted execution of client-side Byzantine Fault-Tolerance (BFT) library functionality on the server-side, enabling legacy clients to access replicated services in a transparent manner. Nonetheless, improving distribution transparency increases the middleware layer's complexity, posing a hindrance to BFT systems' ability to have more transparency in deploying and managing BFT protocols. To resolve this issue, we propose a configurable framework that can manage BFT systems' middleware components flexibly, utilizing a Trusted Execution Environment (TEE) of the emerging RISC-V architecture. The framework offers large-size enclaves that securely execute BFT protocols and other middleware functions, such as network processing, permitting the transparent management of server-side BFT systems without imposing a significant overhead.","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131866611","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A RISC-V Extension to Minimize Privileges of Enclave Runtimes 最小化Enclave运行时特权的RISC-V扩展
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593040
Neelu S. Kalani, Edouard Bugnion
{"title":"A RISC-V Extension to Minimize Privileges of Enclave Runtimes","authors":"Neelu S. Kalani, Edouard Bugnion","doi":"10.1145/3578359.3593040","DOIUrl":"https://doi.org/10.1145/3578359.3593040","url":null,"abstract":"In confidential computing, the view of the system software is Manichean: the host operating system is untrusted and the TEE runtime system is fully trusted. However, the runtime system is often as complex as a full operating system, and thus is not free from bugs and exploitable vulnerabilities. Yet, it executes with complete system-level control over the enclave application, in violation of the least privilege principle. While the confidential computing research community has been striving to secure trusted software from its untrusted counterpart, efforts fall short when it comes to securing the enclave application from potentially bug-prone and vulnerable trusted runtime systems. This project describes the design of a simple RISC-V extension that prevents trusted runtime systems from accessing the enclave application's memory. We implement the hardware extension in the QEMU functional simulator and extend the Keystone TEE framework and its runtime system, Eyrie, to enforce the least privilege principle, support unmodified enclave applications, and prevent a class of Iago attacks that leverage the runtime system's unrestricted access to the enclave application's memory.","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134394620","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
GRAMINER: Fuzz Testing Gramine LibOS to Harden the Trusted Computing Base GRAMINER:模糊测试Gramine LibOS以增强可信计算基础
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 2023-05-08 DOI: 10.1145/3578359.3593036
Jaewon Hur, Byoungyoung Lee
{"title":"GRAMINER: Fuzz Testing Gramine LibOS to Harden the Trusted Computing Base","authors":"Jaewon Hur, Byoungyoung Lee","doi":"10.1145/3578359.3593036","DOIUrl":"https://doi.org/10.1145/3578359.3593036","url":null,"abstract":"Intel SGX [1] enables a variety of valuable use cases (e.g., secure data sharing [13]) by protecting an application from all other untrusted parties (e.g., host kernel). However, incorporating Intel SGX in the conventional software development introduces additional requirements. New interface between the application running in an SGX enclave and the host kernel (i.e., ecall and ocall [1]) is one of the requirements.","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132849601","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Proceedings of the 6th Workshop on System Software for Trusted Execution 第六届可信执行系统软件研讨会论文集
Proceedings of the 6th Workshop on System Software for Trusted Execution Pub Date : 1900-01-01 DOI: 10.1145/3578359
{"title":"Proceedings of the 6th Workshop on System Software for Trusted Execution","authors":"","doi":"10.1145/3578359","DOIUrl":"https://doi.org/10.1145/3578359","url":null,"abstract":"","PeriodicalId":166764,"journal":{"name":"Proceedings of the 6th Workshop on System Software for Trusted Execution","volume":"142 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133580388","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整，为了账户安全，请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们：info@booksci.cn Book学术提供免费学术资源搜索服务，方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号：481959085
Book学术官方微信