Secure Remote Computation using Intel SGX

Abstract

In this paper, we leverage SGX to provide a secure remote computation framework to be used in a cloud scenario. Our framework consists of two parts, a local part running on the user's machine and a remote part which is executed within the provider's environment. Users can connect and authenticate themselves to the remote side, verify the integrity of a newly spawned loading enclave, and deploy confidential code to the provider's machine. While we are not the first using SGX in a cloud scenario, we provide a full implementation considering all practical pitfalls, e.g., we use Intel's Attestation Services to prove the integrity of the loading enclave to our users. We also take care of establishing a secure bidirectional channel between the target enclave and the client running on the user's machine to send code, commands, and data. The performance overhead of CPU-bound applications using our framework is below 10% compared to remote computation without using SGX.

Mehr zum Titel

Titel	Secure Remote Computation using Intel SGX
Medien	Langweg, Hanno; Meier, Michael (Hrsg.) : Sicherheit 2018 (Sicherheit, Schutz und Zuverlässigkeit, Konstanz, 25.04 - 27.04.2018)
Verlag	Köllen Druck+Verlag GmbH
Band	9
ISBN	978-3-88579-675-6
Verfasser	David Übler, Johannes Götzfried, Prof. Dr. Tilo Müller
Seiten	S. 195-205
Veröffentlichungsdatum	17.08.2018
Zitation	Übler, David; Götzfried, Johannes; Müller, Tilo (2018): Secure Remote Computation using Intel SGX. Langweg, Hanno; Meier, Michael (Hrsg.) : Sicherheit 2018 (Sicherheit, Schutz und Zuverlässigkeit, Konstanz, 25.04 - 27.04.2018) 9, S. 195-205.