Abstract:Security and privacy concerns in computer systems have grown in importance with the ubiquity of connected devices. TEEs provide security guarantees based on cryptographic constructs built in hardware. Intel software guard extensions (SGX), in particular, implements powerful mechanisms that can shield sensitive data even from privileged users with full control of system software. In this work, we essentially explore some of the challenges of designing secure distributed systems by using Intel SGX as cornerstone. We do so by designing and experimentally evaluating several elementary systems ranging from communication and processing middleware to a peer-to-peer privacy-preserving solution. We start with support systems that naturally fit cloud deployment scenarios, namely content-based routing, batching and stream processing frameworks. We implement prototypes and use them to analyse the manifested memory usage issues intrinsic to SGX. Next, we aim at protecting very sensitive data: cryptographic keys. By leveraging TEEs, we design protocols for group data sharing that have lower computational complexity than legacy methods. As a bonus, our proposals allow large savings on metadata volume and processing time of cryptographic operations, all with equivalent security guarantees. Finally, we propose privacy-preserving systems against established services like web-search engines. Our evaluation shows that we propose the most robust system in comparison to existing solutions with regard to user re-identification rates and results accuracy in a scalable way. Overall, this thesis proposes new mechanisms that take advantage of TEEs for distributed system architectures. We show through an empirical approach on top of Intel SGX what are the trade-offs of distinct designs applied to distributed communication and processing, cryptographic protocols and private web search.

To Isolate, or to Share?

Armlock: Hardware-Based Fault Isolation For Arm

A Hardware-Software Co-design for Efficient Intra-Enclave Isolation

SGXKernel

SGXLock: Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX

A Survey of Intel SGX and Its Applications.

The Road to Trust: Building Enclaves within Confidential VMs

COIN Attacks

Protecting In-memory Data Cache with Secure Enclaves in Untrusted Cloud.

Leveraging Intel SGX to Create a Nondisclosure Cryptographic library

SGX-LKL: Securing the Host OS Interface for Trusted Execution

DynSGX: A Privacy Preserving Toolset for Dynamically Loading Functions into Intel(R) SGX Enclaves

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Distributed systems and trusted execution environments: Trade-offs and challenges

Understanding TEE Containers, Easy to Use? Hard to Trust

Template for Preparation of Manuscripts for Tsinghua Science and Technology

Stockade: Hardware Hardening for Distributed Trusted Sandboxes

On the Performance of Intel SGX

Sharing without Showing: Secure Cloud Analytics with Trusted Execution Environments

Dynamic Binary Translation for SGX Enclaves