Earticle

초록

영어

Trusted Execution Environments (TEEs) are the most vital security features of contemporary computing, especially in a virtualized environment. Two popular hardware-based TEEs include Intel Software Guard Extensions (SGX) and AMD Secure Encrypted Virtualization (SEV), which respectively help protect sensitive computation from several forms of attacks. This paper investigates SGX and SEV very deeply, including their architecture, memory encryption mechanisms, and the security vulnerabilities they encounter. SGX adopts an enclave-based approach to application-level isolation, whereas SEV affords VM systemwide memory encryption. We discuss the implications of such designs in cloud computing environments and proffer recommendations that will help secure attacks emanating from side-channel and rollback.

목차

Abstract
I. Introduction
II. Architectural Comparison
A. Intel Software Guard Extensions (SGX)
B. AMD Secure Encrypted Virtualization (SEV)
III. Memory Encryption and Isolation
A. SGX Memory Encryption and Isolation
B. SEV Memory Encryption and Isolation
IV. Threat Models and Security Vulnerabilities
A. Intel SGX Threat Model
B. AMD SEV Threat Model
V. Performance Considerations
A. Intel SGX Performance
B. AMD SEV Performance
VI. Future Directions in TEE Development
VII. Conclusion
ACKNOWLEDGEMENT
REFERENCES

키워드

저자

• Omar Bin Kasim Bhuian [ Computer Science Department, Huaiyin Institute of Technology, Huai’an, Jiangsu, China ]
• Ki-Woong Park [ Department of Information Security and Convergence Engineering for Intelligent Drone, Sejong University ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  한국차세대컴퓨팅학회 학술대회

• 간기

  반년간

• 수록기간

  2021~2025

• 십진분류

  KDC 566 DDC 004