Abstract:The ongoing trend of moving data and computation to the cloud is met with concerns regarding privacy and protection of intellectual property. Cloud Service Providers (CSP) must be fully trusted to not tamper with or disclose processed data, hampering adoption of cloud services for many sensitive or critical applications. As a result, CSPs and CPU manufacturers are rushing to find solutions for secure outsourced computation in the Cloud. While enclaves, like Intel SGX, are strongly limited in terms of throughput and size, AMD's Secure Encrypted Virtualization (SEV) offers hardware support for transparently protecting code and data of entire VMs, thus removing the performance, memory and software adaption barriers of enclaves. Through attestation of boot code integrity and means for securely transferring secrets into an encrypted VM, CSPs are effectively removed from the list of trusted entities. There have been several attacks on the security of SEV, by abusing I/O channels to encrypt and decrypt data, or by moving encrypted code blocks at runtime. Yet, none of these attacks have targeted the attestation protocol, the core of the secure computing environment created by SEV. We show that the current attestation mechanism of Zen 1 and Zen 2 architectures has a significant flaw, allowing us to manipulate the loaded code without affecting the attestation outcome. An attacker may abuse this weakness to inject arbitrary code at startup -- and thus take control over the entire VM execution, without any indication to the VM's owner. Our attack primitives allow the attacker to do extensive modifications to the bootloader and the operating system, like injecting spy code or extracting secret data. We present a full end-to-end attack, from the initial exploit to leaking the key of the encrypted disk image during boot, giving the attacker unthrottled access to all of the VM's persistent data.

A Novel Approach For Untrusted Code Execution

A Safe Virtual Execution Environment Based on the Local Virtualization Technology

A Isolated Execution Model Based on Local Virtualization Technology

The Road to Trust: Building Enclaves within Confidential VMs

Cerberus: A Novel Hypervisor to Provide Trusted and Isolated Code Execution

A Secure Virtual Execution Environment for Untrusted Code

AppSec: A Safe Execution Environment for Security Sensitive Applications

A Novel Server-Based Application Execution Architecture

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

A Novel Anomaly Detection Approach for Executable Program Security

undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation

vTrust: Remotely Executing Mobile Apps Transparently With Local Untrusted OS

Tamper-Resistant Execution in an Untrusted Operating System Using A Virtual Machine Monitor

A Light-Weight, Secure and Trusted Virtual Execution Environment

A Verified Architecture for Proofs of Execution on Remote Devices under Full Software Compromise

Novel sandbox for executing malicious code

SEVE: Symbolic Execution Based Vulnerability Exploring System

Vcerberus: A DRTM System Based on Virtualization Technology

A Novel Security Validation In Embedded System

One-Way Isolation Execution Model Based on Hardware Virtualization