SoK: Hardware-supported Trusted Execution Environments

Abstract

The growing complexity of modern computing platforms and the need for strong isolation protections among their software components has led to the increased adoption of Trusted Execution Environments (TEEs). While several commercial and academic TEE architectures have emerged in recent times, they remain hard to compare and contrast. More generally, existing TEEs have not been subject to a holistic systematization to understand the available design alternatives for various aspects of TEE design and their corresponding pros-and-cons.Therefore, in this work, we analyze the design of existing TEEs and systematize the mechanisms that TEEs implement to achieve their security goals, namely, verifiable launch, run-time isolation, trusted IO and secure storage. More specifically, we analyze the typical architectural building blocks underlying TEE solutions, design alternatives for each of these components and the trade-offs that they entail. We focus on hardware-assisted TEEs and cover a wide range of TEE proposals from academia and the industry. Our analysis shows that although TEEs are diverse in terms of their goals, usage models and instruction set architectures, they all share many common building blocks in terms of their design.

Federated learning enables big data for rare cancer boundary detection

“…A number of technologies can be used to mitigate security and privacy concerns during FL [55][56][57] . Homomorphic encryption 58 , secure multiparty compute 59 , and trusted execution environments (TEEs) 60,61 allow for collaborative computations to be performed with untrusted parties while maintaining confidentiality of the inputs to the computation. Differentially private training algorithms [62][63][64] allow for mitigation of information leakage from both the collaborator model updates and the global consensus aggregated models.…”

“…In this study, all the network communications during the FL model training process were based on TLS 111 , to mitigate potential exposure of information during transit. Additionally, we demonstrated the feasibility of TEEs 60,61 for federated training by running the aggregator workload on the secure enclaves of Intel's Secure Guard Extensions (SGX) hardware (Intel® Xeon® E-2286M vPro 8-Core 2.4-5.0GHz Turbo), which ensured the confidentiality of the updates being aggregated and the integrity of the consensus model. TLS and TEEs can help mitigate some of the security and privacy concerns that remain for FL 55 .…”

“…60 Image-Based Biomedical Modeling, Department of Informatics, Technical University of Munich, Munich, Germany. 61 Department of Radiology, NYU Grossman School of Medicine, New York, NY, USA. 62 Department of Neurosurgery, NYU Grossman School of Medicine, New York, NY, USA.…”

Efficient and Timely Revocation of V2X Credentials

“…Examples of TCs are the TPM, ARM TrustZone, or TEEs such as Intel Security Guard Extensions (SGX) and ARM Confidential Compute Architecture (CCA). Nowadays, trusted components are ubiquitous in modern hardware [38], and with recent developments in the automotive domain, starting with Infineon's automotive-certified Optiga TPM [27] (released in 2018) and automotive security processors such as the NXP NCJ38A [37] (available since 2020), TEE solutions are available and working groups within the Trusted Computing Group and Global Platform are active in designing automotive security services based on TEEs [42], [22].…”

Sistema de Informação para Agendamento 4.0: Caracterização, UX e LGPD

“…O tratamento de dados processados em um dispositivo requer confiabilidade no ambiente de execuc ¸ão. Os ambientes de execuc ¸ão confiáveis, do inglês Trusted Execution Environments (TEEs), vêm se tornando uma soluc ¸ão popular que visa proteger dados confidenciais em tempo de execuc ¸ão [Schneider et al 2022].…”