SGX应用支持技术研究进展

安全与可信是云计算中极为重要的需求,如何保护用户在云平台上托管的应用程序代码和数据的安全、防止云服务提供商和其他攻击者窃取用户机密数据,一直是个难题.2013年,Intel公司提出了新的处理器安全技术SGX,能够在计算平台上提供一个用户空间的可信执行环境,保证用户关键代码及数据的机密性和完整性.SGX技术自提出以来,已...

Research Progress of SGX Application Supporting Techniques

Security and trustworthy are extremely important requirements for cloud computing. How to protect critical application code and data on the cloud platform and prevent cloud service providers and other attackers from stealing user confidential data is a difficult problem. In 2013, Intel proposed a new processor security technology SGX, which can provide a trusted execution environment for user space on the computing platform to ensure the confidentiality and integrity of critical user code and data. Since SGX technology proposed, it has gradually become an important solution to cloud computing security issues. How to effectively apply SGX technology to protect application has become research hotspot in recent years. In this paper, the mechanisms and SDK of SGX are introduced, and the bottlenecks such as security issues, performance bottlenecks, development difficulties, and function limitations faced by SGX application are summarized. The paper analyzes and summaries the research progress of SGX application supporting techniques, including SGX application security protection technique SGX application performance optimization technique, SGX application assisted development technique and SGX function extension technique. Finally, the development direction of SGX application supporting techniques are suggested.