Secure Live Migration of SGX Enclaves on Untrusted Cloud

Gu, Jinyu; Hua, Zhichao; Xia, Yubin; Chen, Haibo; Zang, Binyu; Guan, Haibing; Li, Jinming

doi:10.1109/dsn.2017.37

Cited by 42 publications

(31 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We cannot directly reuse the memory because it's encryption keys are differently generated by the CPU in its initialization phase and thus the decryption on the updated kernel fails. To support such applications, we need to combine the advanced migration technique [23] into our mechanism.…”

Section: Discussionmentioning

confidence: 99%

Shortening Downtime of Reboot-Based Kernel Updates Using Dwarf

Terada

Yamada

2018

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

Kernel updates are a part of daily life in contemporary computer systems. They usually require an OS reboot that involves restarting not only the kernel but also all of the running applications, causing downtime that can disrupt software services. This downtime issue has been tackled by numerous approaches. Although dynamic translation of the running kernel image, which is a representative approach, can conduct kernel updates at runtime, its applicability is inherently limited. This paper describes Dwarf, which shortens downtime during kernel updates and covers more types of updates. Dwarf launches the newer kernel in the background on the same physical machine and forces the kernel to inherit the running states of the older kernel. We implemented a prototype of Dwarf on Xen 4.5.2, Linux 2.6.39, Linux 3.18.35, and Linux 4.1.6. Also, we conducted experiments using six applications, such as Apache, MySQL, and memcached, and the results demonstrate that Dwarf's downtime is 1.8 seconds in the shortest case and up to 10× shorter than that of the normal OS reboot.

show abstract

Section: Discussionmentioning

confidence: 99%

Shortening Downtime of Reboot-Based Kernel Updates Using Dwarf

Terada

Yamada

2018

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

show abstract

“…That is solved by means of a migration key transmitted through secure channels built by leveraging SGX attestation and by a self-destroy approach, which prevents the enclave from being resumed after it was checkpointed. Overall, authors [55] show a negligible performance overhead. Such mechanism could eventually be integrated into our system, towards a globally optimized EPC utilization through the migration of enclaves.…”

Section: Related Workmentioning

confidence: 93%

SGX-Aware Container Orchestration for Heterogeneous Clusters

Vaucher

Pires

Felber

et al. 2018

2018 IEEE 38th International Conference on Distributed Computing Systems (ICDCS)

View full text Add to dashboard Cite

Containers are becoming the de facto standard to package and deploy applications and micro-services in the cloud. Several cloud providers (e.g., Amazon, Google, Microsoft) begin to offer native support on their infrastructure by integrating container orchestration tools within their cloud offering. At the same time, the security guarantees that containers offer to applications remain questionable. Customers still need to trust their cloud provider with respect to data and code integrity. The recent introduction by Intel of Software Guard Extensions (SGX) into the mass market offers an alternative to developers, who can now execute their code in a hardware-secured environment without trusting the cloud provider.This paper provides insights regarding the support of SGX inside Kubernetes, an industry-standard container orchestrator. We present our contributions across the whole stack supporting execution of SGX-enabled containers. We provide details regarding the architecture of the scheduler and its monitoring framework, the underlying operating system support and the required kernel driver extensions. We evaluate our complete implementation on a private cluster using the real-world Google Borg traces. Our experiments highlight the performance tradeoffs that will be encountered when deploying SGX-enabled microservices in the cloud.

show abstract

“…If a VM containing an SGX enclave were migrated using existing VM migration techniques, the enclave would not be migrated because the migration process would not be able to access the EPC. In order to migrate the enclave, an SGX-aware migration mechanism, such as that proposed by Park et al [1] or Gu et al [2] must be used.…”

Section: B Sgx Virtualization and Migrationmentioning

confidence: 99%

“…Secondly, we focused on migrating the persistent state of the enclave. Migrating the data memory of the enclave is an orthogonal challenge that can be solved e.g., using the mechanism proposed by Gu et al [2]. Combining the two approaches would lead to a possibility to migrate enclaves without the need to stop and restart them.…”

Section: Future Workmentioning

confidence: 99%

See 1 more Smart Citation

Migrating SGX Enclaves with Persistent State

Alder

Kurnikov

Paverd

et al. 2018

2018 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)

View full text Add to dashboard Cite

Hardware-supported security mechanisms like Intel Software Guard Extensions (SGX) provide strong security guarantees, which are particularly relevant in cloud settings. However, their reliance on physical hardware conflicts with cloud practices, like migration of VMs between physical platforms. For instance, the SGX trusted execution environment (enclave) is bound to a single physical CPU.Although prior work has proposed an effective mechanism to migrate an enclave's data memory, it overlooks the migration of persistent state, including sealed data and monotonic counters; the former risks data loss whilst the latter undermines the SGX security guarantees. We show how this can be exploited to mount attacks, and then propose an improved enclave migration approach guaranteeing the consistency of persistent state. Our software-only approach enables migratable sealed data and monotonic counters, maintains all SGX security guarantees, minimizes developer effort, and incurs negligible performance overhead.

show abstract

Secure Live Migration of SGX Enclaves on Untrusted Cloud

Cited by 42 publications

References 13 publications

Shortening Downtime of Reboot-Based Kernel Updates Using Dwarf

Shortening Downtime of Reboot-Based Kernel Updates Using Dwarf

SGX-Aware Container Orchestration for Heterogeneous Clusters

Migrating SGX Enclaves with Persistent State

Contact Info

Product

Resources

About