PubSub-SGX：为隐私保护发布/订阅系统开发可信执行环境
PubSub-SGX: Exploiting Trusted Execution Environments for Privacy-Preserving Publish/Subscribe Systems
摘要：
本文介绍了PUBSUB-SGX，这是一个基于内容的在线订阅系统，它利用可信执行环境（TEE），如英特尔SGX，来保证数据的机密性和完整性以及发布者和订阅者的匿名性和隐私性。我们描述了Python实现的技术细节，以及在基于容器的运行时中部署我们的系统所需的系统支持。我们的评估结果表明，我们的方法是合理的，同时突出了性能和可扩展性的权衡。特别是，通过支持TEE内部的即时编译，TEE内部的Python程序通常比使用标准CPython本地执行时更快。
英文摘要：
This paper presents PUBSUB-SGX, a content-based publish-subscribe system that exploits trusted execution environments (TEEs), such as Intel SGX, to guarantee confidentiality and integrity of data as well as anonymity and privacy of publishers and subscribers. We describe the technical details of our Python implementation, as well as the required system support introduced to deploy our system in a container-based runtime. Our evaluation results show that our approach is sound, while at the same time highlighting the performance and scalability trade-offs. In particular, by supporting just-in-time compilation inside of TEEs, Python programs inside of TEEs are in general faster than when executed natively using standard CPython.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
