Publikationen

Autor	Wang, Jianqiang; Mahmoody, Pouya; Brasser, Ferdinand; Jauernig, Patrick; Sadeghi, Ahmad-Reza; Yu, Donghui; Pan, Dahan; Zhang, Yuanyuan
Datum	2022
Art	Conference Proceedings
Abstrakt	Modern security architectures provide Trusted Execution Environments (TEEs) to protect critical data and applications against malicious privileged software in so-called enclaves. However, the seamless integration of existing TEEs into the cloud is hindered, as they require substantial adaptation of the software executing inside an enclave as well as the cloud management software to handle enclaved workloads. We tackle these challenges by presenting VirTEE, the first TEE architecture that allows strongly isolated execution of unmodified virtual machines (VMs) in enclaves, as well as secure live migration of VM enclaves between VirTEE-enabled servers. Combined with its secure I/O capabilities, VirTEE enables the integration of enclaved computing in today's complex cloud infrastructure. We thoroughly evaluate our RISC-V-based prototype, and show its effectiveness and efficiency.
Konferenz	59th ACM/IEEE Design Automation Conference
ISBN	978-1-4503-9142-9
In	DAC'22: Proceedings of the 59th ACM/IEEE Design Automation Conference, p.241-246
Publisher	ACM
Url	https://tubiblio.ulb.tu-darmstadt.de/id/eprint/137470

VirTEE: a full backward-compatible TEE with native live migration and secure I/O