Secure Processors Part I: Background, Taxonomy for Secure Enclaves and Intel SGX Architecture (Foundations and Trends(r) in Electronic Design Automation)

Costan, Victor; Lebedev, Ilia; Devadas, Srinivas

ISBN 10: 1680833006 / ISBN 13: 9781680833003

Editore: Now Publishers, 2017

Riguardo questo articolo

pp. 268.

Codice articolo 26378416600

Dati bibliografici

• Titolo: Secure Processors Part I: Background, Taxonomy for Secure Enclaves and Intel SGX Architecture (Foundations and Trends(r) in Electronic Design Automation)
• Editore: Now Publishers
• Data di pubblicazione: 2017
• Lingua: Inglese
• ISBN 10: 1680833006
• ISBN 13: 9781680833003
• Rilegatura: Brossura
• Condizione: New

Descrizione articolo

Riassunto

This monograph is the first in a two-part survey and analysis of the state of the art in secure processor systems, with a specific focus on remote software attestation and software isolation. It first examines the relevant concepts in computer architecture and cryptography, and then surveys attack vectors and existing processor systems claiming security for remote computation and/or software isolation. It examines, in detail, the modern isolation container (enclave) primitive as a means to minimize trusted software given practical trusted hardware and reasonable performance overhead. Specifically, this work examines the programming model and software design considerations of Intel’s Software Guard Extensions (SGX), as it is an available and documented enclave-capable system. This work advocates a principled, transparent, and well-scrutinized approach to secure system design, and argues that practical guarantees of privacy and integrity for remote computation are achievable at a reasonable design cost and performance overhead. See also: Secure Processors Part II: Intel SGX Security Analysis and MIT Sanctum Architecture Part II (ISBN 978-1-68083-302-7). Part II of this survey a deep dive into the implementation and security evaluation of two modern enclave-capable secure processor systems: SGX and MIT’s Sanctum. The complex but insufficient threat model employed by SGX motivates Sanctum, which achieves stronger security guarantees under software attacks with an equivalent programming model.