TWC: Medium: Collaborative: Systems, Tools, and Techniques for Executing, Managing, and Securing SGX Programs

TWC：媒介：协作：用于执行、管理和保护 SGX 程序的系统、工具和技术

• 批准号: 1834213
• 负责人: Zhiqiang Lin
• 金额: $ 46.15万
• 依托单位: Ohio State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-01-01 至 2022-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1834213&HistoricalAwards=false
• 关键词: TWC; Medium; Collaborative; Systems; Tools; TWC; Medium; Collaborative; Systems; Tools

The Intel Software Guard Extensions (SGX) is a new technology introduced to make secure and trustworthy computing in a hostile environment practical. However, SGX is merely just a set of instructions. Its software support that includes the OS support, toolchain and libraries, is currently developed in a closed manner, limiting its impact only within the boundary of big companies such as Intel and Microsoft. Meanwhile, SGX does not automatically secure everything and it still faces various attacks such as controlled-side channel and enclave memory corruption.This research investigates how to enable application developers to securely use the SGX instructions, with an open source software support including a toolchain, programming abstractions (e.g., library), and operating system support (e.g., kernel modules). In addition, this research systematically explores the systems and software defenses necessary to secure the SGX programs from the enclave itself and defeat the malicious use of SGX from the underlying OS.

英特尔软件防护局扩展（SGX）是一项新技术，旨在在敌对的环境中实用地制造安全且值得信赖的计算。但是，SGX只是一组指令。 它的软件支持包括OS支持，工具链和库，目前以封闭的方式开发，仅限于Intel和Microsoft等大公司的边界内的影响。同时，SGX并不能自动保护所有内容，并且仍然面临各种攻击，例如受控侧渠道和飞地内存腐败。本研究调查如何使应用程序开发人员能够安全地使用SGX指令，并提供开源软件支持，包括工具链，程序链，程序摘要（E.G.，图书馆）和操作系统支持（E.G.，例如Kernel Modules）。此外，这项研究系统地探讨了从飞地本身中保护SGX程序所需的系统和软件防御，并击败了基础操作系统对SGX的恶意使用。