Occlum
Youren Shen, Hongliang Tian, Yu Chen, Kang Chen, Runji Wang, Yi Xu, Yubin Xia, Shoumeng Yan
Abstract
Intel Software Guard Extensions (SGX) enables user-level code to create private memory regions called enclaves, whose code and data are protected by the CPU from software and hardware attacks outside the enclaves. Recent work introduces library operating systems (LibOSes) to SGX so that legacy applications can run inside enclaves with few or even no modifications. As virtually any non-trivial application demands multiple processes, it is essential for LibOSes to support multitasking. However, none of the existing SGX LibOSes support multitasking both securely and efficiently.
Topics & Concepts
Computer scienceGuard (computer science)Operating systemHuman multitaskingSoftwareLegacy codeCode (set theory)Embedded systemSource codeComputer securityKey (lock)Work (physics)Computer multitaskingSoftware systemSoftware engineeringSource lines of codeLegacy systemSecurity and Verification in ComputingAdvanced Malware Detection TechniquesCloud Data Security Solutions