
Secure Processors Part II
Intel SGX Security Analysis and MIT Sanctum Architecture
now publishers Inc
1st Edition
Published on 13. July 2017
Book
Paperback/Softback
128 pages
978-1-68083-302-7 (ISBN)
Description
This manuscript is the second in a two part survey and analysis of the state of the art in secure processor systems, with a specific focus on remote software attestation and software isolation. The first part established the taxonomy and prerequisite concepts relevant to an examination of the state of the art in trusted remote computation: attested software isolation containers (enclaves). This second part extends Part I's description of Intel's Software Guard Extensions (SGX), an available and documented enclave-capable system, with a rigorous security analysis of SGX as a system for trusted remote computation. This part documents the authors' concerns over the shortcomings of SGX as a secure system and introduces the MIT Sanctum processor developed by the authors: a system designed to offer stronger security guarantees, lend itself better to analysis and formal verification, and offer a more straightforward and complete threat model than the Intel system, all with an equivalent programming model.
This two part work advocates a principled, transparent, and wellscrutinized approach to system design, and argues that practical guarantees of privacy and integrity for remote computation are achievable at a reasonable design cost and performance overhead.
This two part work advocates a principled, transparent, and wellscrutinized approach to system design, and argues that practical guarantees of privacy and integrity for remote computation are achievable at a reasonable design cost and performance overhead.
More details
Series
Language
English
Place of publication
Hanover
United States
Target group
College/higher education
Dimensions
Height: 234 mm
Width: 156 mm
ISBN-13
978-1-68083-302-7 (9781680833027)
DOI
10.1561/1000000052
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Content
1: Introduction 2: An Analysis of Intel's Software Guard Extensions (SGX) 3: The MIT Sanctum Processor 4: Conclusion 5: Acknowledgements. References.