超越边界的信任:轻量级,可验证的用户隔离,以保护封闭区内服务
Wenhao Wang1, Weijie Liu2, Hongbo Chen2
1State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China.
概括
英特尔软件保护扩展 (SGX) TEE缺乏用户隔离. Liveries引入了轻量级,可验证的对时间共享服务的封闭式用户隔离,以最小的开销保护敏感数据.
科学领域:
- 计算机科学 计算机科学
- 网络安全 网络安全
- 系统安全 系统安全
背景情况:
- 值得信赖的执行环境 (TEE),如英特尔的软件保护扩展 (SGX),缺乏在封闭区的隔离.
- 这种限制阻止了在单个区域内安全执行多个用户的任务,阻碍了诸如共享机器学习模型或微服务之类的现实应用.
研究的目的:
- 开发一种用于轻量级,可验证的封闭区内用户隔离的技术.
- 为了在一个单独的飞地内实现安全的时间共享服务.
- 为了保护敏感的用户数据免受对手的攻击,即使有封闭区的妥协.
主要方法:
- 介绍了Liveries,这是一种用于在封闭区内隔离用户的新技术.
- 在封闭区配置期间为封闭区内线程实施特权限制.
- 在用户切换过程中开发了关键封锁数据的完整性检查和消毒.
主要成果:
- 体提供轻量级的封闭区内用户隔离,只需1%的性能开销.
- 该技术是可验证的,大约有3200行代码.
- 实现了对敏感用户数据的保护,包括会话密钥,免受受损害的封锁.
结论:
- 体提供了一个可行的解决方案,以确保TEE的安全时间共享.
- 这项技术代表了向保证对现实世界内服务的保护迈出的重要一步.
- 允许TEE在多用户敏感应用中得到更广泛的采用.
相关概念视频
Zones of Protection
175
In power systems, the entire setup is divided into protective zones to isolate faults and protect the rest of the network. These zones include generators, transformers, buses, transmission lines, distribution lines, and motors. Each zone can be visualized as a separate room in a house, with each room protected by its own circuit breaker.
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
Protective zones are defined by closed dashed lines, containing one or more components. A key characteristic of these zones is the strategic placement of...
175
Line Protection with Impedance Relays
82
Coordinating time-delay overcurrent relays in complex radial systems and directional overcurrent relays in multi-source transmission loops can be challenging. Impedance relays address these issues by responding to the voltage-to-current ratio, specifically measuring the apparent impedance of a line. These relays become more sensitive during faults as current increases and voltage decreases, thereby reducing the apparent impedance.
Under normal conditions, low load currents keep the measured...
Under normal conditions, low load currents keep the measured...
82
Masking and Demasking Agents
2.4K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
2.4K
Censoring Survival Data
97
Survival analysis is a statistical method used to analyze time-to-event data, often employed in fields such as medicine, engineering, and social sciences. One of the key challenges in survival analysis is dealing with incomplete data, a phenomenon known as "censoring." Censoring occurs when the event of interest (such as death, relapse, or system failure) has not occurred for some individuals by the end of the study period or is otherwise unobservable, and it might have many different...
97
Overview Of Cell Separation And Isolation
5.7K
Cell separation was first achieved in 1964 by S. H. Seal, who separated large tumor cells from the smaller blood cells using filtration. Two years later, Pohl and Hawk performed experiments on how cells respond differently to a nonuniform electric field based on the cell type. Such observations were the inception of cell separation methods, which allow isolating a single cell type from a heterogeneous sample.
5.7K
Cyclic Processes And Isolated Systems
2.8K
A thermodynamic system with zero heat exchange and work is an isolated system. For these systems, the internal energy remains constant.
In the case of a non-isolated system, the change in the internal energy is zero only if the process is cyclic. A thermodynamic process is considered cyclic if the system undergoes a series of changes and returns to its initial state.
Consider a cyclic process that returns to its initial state, undergoing a four-step process. The heat transfer along each...
In the case of a non-isolated system, the change in the internal energy is zero only if the process is cyclic. A thermodynamic process is considered cyclic if the system undergoes a series of changes and returns to its initial state.
Consider a cyclic process that returns to its initial state, undergoing a four-step process. The heat transfer along each...
2.8K


