Abstract:Integrity is critical for maintaining system security, as it ensures that only genuine software is loaded onto a machine. Although confidential virtual machines (CVMs) function within isolated environments separate from the host, it is important to recognize that users still encounter challenges in maintaining control over the integrity of the code running within the trusted execution environments (TEEs). The presence of a sophisticated operating system (OS) raises the possibility of dynamically creating and executing any code, making user applications within TEEs vulnerable to interference or tampering if the guest OS is compromised. To address this issue, this paper introduces NestedSGX, a framework which leverages virtual machine privilege level (VMPL), a recent hardware feature available on AMD SEV-SNP to enable the creation of hardware enclaves within the guest VM. Similar to Intel SGX, NestedSGX considers the guest OS untrusted for loading potentially malicious code. It ensures that only trusted and measured code executed within the enclave can be remotely attested. To seamlessly protect existing applications, NestedSGX aims for compatibility with Intel SGX by simulating SGX leaf functions. We have also ported the SGX SDK and the Occlum library OS to NestedSGX, enabling the use of existing SGX toolchains and applications in the system. Performance evaluations show that context switches in NestedSGX take about 32,000 -- 34,000 cycles, approximately $1.9\times$ -- $2.1\times$ higher than that of Intel SGX. NestedSGX incurs minimal overhead in most real-world applications, with an average overhead below 2% for computation and memory intensive workloads and below 15.68% for I/O intensive workloads.

Dynamic Binary Translation for SGX Enclaves

SGXKernel

The Road to Trust: Building Enclaves within Confidential VMs

DynSGX: A Privacy Preserving Toolset for Dynamically Loading Functions into Intel(R) SGX Enclaves

SGXLock: Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX

Managing Large Enclaves in a Data Center

SGX-LKL: Securing the Host OS Interface for Trusted Execution

COIN Attacks

Secure Live Migration of SGX Enclaves on Untrusted Cloud

SmashEx: Smashing SGX Enclaves Using Exceptions

Leveraging Intel SGX to Create a Nondisclosure Cryptographic library

SAPPX: Securing COTS Binaries with Automatic Program Partitioning for Intel SGX

FPGA based hardware-software co-designed dynamic binary translation system

HyperEnclave: an Open and Cross-platform Trusted Execution Environment

A Hardware-Software Co-design for Efficient Intra-Enclave Isolation

GXBIT: Combining polyhedral model with dynamic binary translation

Guardian: symbolic validation of orderliness in SGX enclaves

To Isolate, or to Share?

See Through Walls: Detecting Malware in SGX Enclaves with SGX-Bouncer.

Toward an SGX-Friendly Java Runtime