SecureFS: A Secure File System for Intel SGX

Kumar, Sandeep; Sarangi, Smruti R.

doi:10.1145/3471621.3471840

Cited by 11 publications

(3 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Intel SGX introduced the Intel Protection File System (IPFS) library to increase the security of data at rest. In addition, some research has proposed improvements to existing secure storage mechanisms, with representative work including DISKSHEILD [96] and SecureFS [97].…”

Section: 25mentioning

confidence: 99%

Survey of research on confidential computing

Feng,

Qin,

Feng

et al. 2024

IET Communications

View full text Add to dashboard Cite

As the global data strategy deepens and data elements accelerate integrating and flowing more rapidly, the demand for data security and privacy protection has become increasingly prominent. Confidential computing emerges as a crucial security technology to solve security and privacy problem, and it is also a hot subject of in contemporary security technologies. Leveraging collaborative security in both hardware and software, it builds a trusted execution environment to ensure confidentiality and integrity protection for data in use. This paper provides a comprehensive overview of the development process of confidential computing, summarizing its current research status and issues, which focuses on the security requirements for data security and privacy protection. Furthermore, it deeply analyses the common technical features of confidential computing, and proposes a trusted confidential computing architecture based on collaborative hardware and software trust. Then, it elaborates on the research status and issues of confidential computing from four aspects: hardware security, architecture and key technologies, applications, and standards and evaluation. Finally, this paper provides a synthesis and outlook for the future development of confidential computing. In summary, confidential computing is currently in a rapidly developing stage and will play an important role in cyber security in the future.

show abstract

Section: 25mentioning

confidence: 99%

Survey of research on confidential computing

Feng,

Qin,

Feng

et al. 2024

IET Communications

View full text Add to dashboard Cite

show abstract

“…In the previous generation of SGX, referred to as SGXv1 in this paper, the size of the usable EPC was limited to 92 MB [37,43,44], which limited the use case of SGX for large memory footprint workloads. To mitigate the issue of the limited size of the EPC, Intel has announced a new generation of SGX, called scalable SGX, which can support an EPC up to 512 GB [3,15].…”

Section: Scalable Sgxmentioning

confidence: 99%

“…During migration, M k is sent securely to the destination enclave. Many works in the key management space for Intel SGX [21,29,44] propose a secure method to transfer data such as cryptographic keys. One of them is via remote attestation [22], which uses a trusted third-party server.…”

Section: Management Of Keys and Their Transfermentioning

confidence: 99%

Effect of Sampling Rate on Parametric and Non-parametric Data Preprocessing for Gearbox Fault Diagnosis

Kumar

Kumar²,

Sarangi³

2023

J. Vib. Eng. Technol.

View full text Add to dashboard Cite

Live migration of an application or a VM is a well-known technique for load balancing, performance optimization and resource management. To minimize the total downtime during migration, two popular methods -pre-copy or post-copy are used in practice. These methods scale to large VMs and applications since the downtime is independent of the memory footprint of an application. However, in a secure, Trusted Execution Environment (TEE) like Intel's scalable SGX, the stateof-the-art still uses the decade-old stop-and-copy method, where the total downtime is proportional to the application's memory footprint. This is primarily due to the fact that TEEs like Intel SGX do not expose memory and page table accesses to the OS, quite unlike unsecure applications.However, with modern TEE solutions that efficiently support large applications, such as Intel's Scalable SGX and AMD's Epyc, it is high time that TEE migration methods also evolve to enable live migration of large TEE applications with a minimal downtime (stop-and-copy cannot be used any more). We present OptMig, an end-to-end solution for live migrating large memory footprint TEE-enabled applications. Our approach does not require a developer to modify the application; however, we need a short, separate compilation pass and specialized software library support. Our optimizations reduce the total downtime by 98% for a representative microbenchmark that uses 20GB of secure memory and by 90-96% for a suite of Intel SGX applications that have multi-GB memory footprints. 1 We shall use Intel SGX as our TEE solution in the rest of the paper 1

show abstract

Romeo: SGX-Based Software Anti-piracy Framework

Song

Wang

2023

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

SecureFS: A Secure File System for Intel SGX

Cited by 11 publications

References 11 publications

Survey of research on confidential computing

Survey of research on confidential computing

Effect of Sampling Rate on Parametric and Non-parametric Data Preprocessing for Gearbox Fault Diagnosis

Romeo: SGX-Based Software Anti-piracy Framework

Contact Info

Product

Resources

About