Towards a trustworthy, secure and reliable enclave for machine learning in a hospital setting: The Essen Medical Computing Platform (EMCP)

Sanctorum: A lightweight security monitor for secure enclaves

Enclaves have emerged as a particularly compelling primitive to implement trusted execution environments: strongly isolated sensitive user-mode processes in a largely untrusted software environment. While the threat models employed by various enclave systems differ, the high-level guarantees they offer are essentially the same: attestation of an enclave's initial state, as well as a guarantee of enclave integrity and privacy in the presence of an adversary. This work describes Sanctorum, a small trusted code base (TCB), consisting of a generic enclave-capable system, which is sufficient to imp…

Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX

Intel Software Guard Extensions (SGX) enables user-level code to create private memory regions called enclaves, whose code and data are protected by the CPU from software and hardware attacks outside the enclaves. Recent work introduces library operating systems (LibOSes) to SGX so that legacy applications can run inside enclaves with few or even no modifications. As virtually any non-trivial application demands multiple processes, it is essential for LibOSes to support multitasking. However, none of the existing SGX LibOSes support multitasking both securely and efficiently. This paper presen…

在物联网RISC-V可信执行环境中的软件开发生命周期安全研究

On Securing the Software Development Lifecycle in IoT RISC-V Trusted Execution Environments

本文提出了一种新型工具包，使RISC-V TEE支持软件开发生命周期的关键功能，包括安全更新、迁移、状态连续性和可信时间，且性能开销极低。

被认为有害的激活函数：通过受控信道恢复神经网络权重

Activation Functions Considered Harmful: Recovering Neural Network Weights through Controlled Channels

本研究发现特权攻击者可利用神经网络激活函数的输入相关内存访问模式，借助SGX-Step框架从Intel SGX飞地中窃取模型参数，实验验证了攻击有效性，并指出需加强机器学习实现的侧信道验证。