SecureLease

Kumar, Sandeep; Panda, Abhisek; Sarangi, Smruti R.

doi:10.1145/3528535.3531514

Cited by 1 publication

(3 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the previous generation of SGX, referred to as SGXv1 in this paper, the size of the usable EPC was limited to 92 MB [37,43,44], which limited the use case of SGX for large memory footprint workloads. To mitigate the issue of the limited size of the EPC, Intel has announced a new generation of SGX, called scalable SGX, which can support an EPC up to 512 GB [3,15].…”

Section: Scalable Sgxmentioning

confidence: 99%

“…On the destination machine, M k is securely delivered to the restored enclave and is never exposed in a plain text form outside SGX [40,43]. This approach also prevents a replay attack, as the attacker can only replay the encrypted data and not the M k .…”

Section: Management Of Keys and Their Transfermentioning

confidence: 99%

“…CRIU restores the process on the destination machine, and a fresh enclave is initialized (we modify the SDK to ensure that an enclave is initialized without the application explicitly calling intialize_enclave()). After initialization, OptMigLib receives the master key (M k ) from the source machine via remote attestation or any other third-party service [29,43]. It uses M k to restore the BSS segment, data segment, and the metadata of OptMgr.…”

Section: Restoring An Enclavementioning

confidence: 99%

See 2 more Smart Citations

Effect of Sampling Rate on Parametric and Non-parametric Data Preprocessing for Gearbox Fault Diagnosis

Kumar

Kumar²,

Sarangi³

2023

J. Vib. Eng. Technol.

View full text Add to dashboard Cite

Live migration of an application or a VM is a well-known technique for load balancing, performance optimization and resource management. To minimize the total downtime during migration, two popular methods -pre-copy or post-copy are used in practice. These methods scale to large VMs and applications since the downtime is independent of the memory footprint of an application. However, in a secure, Trusted Execution Environment (TEE) like Intel's scalable SGX, the stateof-the-art still uses the decade-old stop-and-copy method, where the total downtime is proportional to the application's memory footprint. This is primarily due to the fact that TEEs like Intel SGX do not expose memory and page table accesses to the OS, quite unlike unsecure applications.However, with modern TEE solutions that efficiently support large applications, such as Intel's Scalable SGX and AMD's Epyc, it is high time that TEE migration methods also evolve to enable live migration of large TEE applications with a minimal downtime (stop-and-copy cannot be used any more). We present OptMig, an end-to-end solution for live migrating large memory footprint TEE-enabled applications. Our approach does not require a developer to modify the application; however, we need a short, separate compilation pass and specialized software library support. Our optimizations reduce the total downtime by 98% for a representative microbenchmark that uses 20GB of secure memory and by 90-96% for a suite of Intel SGX applications that have multi-GB memory footprints. 1 We shall use Intel SGX as our TEE solution in the rest of the paper 1

show abstract

Section: Scalable Sgxmentioning

confidence: 99%

Section: Management Of Keys and Their Transfermentioning

confidence: 99%

Section: Restoring An Enclavementioning

confidence: 99%

See 1 more Smart Citation