使用强隔离的私有委托计算
Private delegated computations using strong isolation
摘要：
敏感的计算现在通常委托给第三方。作为回应，机密计算技术正在被引入微处理器，提供一个受保护的处理环境，我们通常称之为隔离，为内部托管的代码和数据提供机密性和完整性保证-即使面对特权攻击者。使用证明协议，隔离允许远程第三方在不受信任的机器上建立包含已知代码和数据的可信“滩头阵地”。然而，这些技术的兴起带来了许多新问题，包括：如何将计算安全地部署到隔离区;如何开发跨越多个隔离级别的分布式系统;以及如何处理不支持机密计算的数十亿“遗留”设备？解决上述问题，我们介绍韦拉克鲁斯，一个框架，简化了复杂的隐私保护，协作，委托计算之间的一组相互不信任的主体的设计和实施。韦拉克鲁斯支持多种隔离技术，并提供了一个通用的编程模型和认证协议在所有这些，平滑部署委托计算支持的技术。我们演示了韦拉克鲁斯在操作中，对来自摄像机的加密视频流进行私有云内目标检测。除了支持硬件支持的隔离（如AWS Nitro Enclaves和Arm机密计算架构Realms）外，Veracruz还使用高保证seL 4微内核和我们的IceCap框架，在没有硬件机密计算功能的Armv 8-A设备上提供实用的“软件隔离”。
英文摘要：
Sensitive computations are now routinely delegated to third-parties. In response, Confidential Computing technologies are being introduced to microprocessors, offering a protected processing environment, which we generically call an isolate, providing confidentiality and integrity guarantees to code and data hosted within -- even in the face of a privileged attacker. Isolates, with an attestation protocol, permit remote third-parties to establish a trusted "beachhead" containing known code and data on an otherwise untrusted machine. Yet, the rise of these technologies introduces many new problems, including: how to ease provisioning of computations safely into isolates; how to develop distributed systems spanning multiple classes of isolate; and what to do about the billions of "legacy" devices without support for Confidential Computing? Tackling the problems above, we introduce Veracruz, a framework that eases the design and implementation of complex privacy-preserving, collaborative, delegated computations among a group of mutually mistrusting principals. Veracruz supports multiple isolation technologies and provides a common programming model and attestation protocol across all of them, smoothing deployment of delegated computations over supported technologies. We demonstrate Veracruz in operation, on private in-cloud object detection on encrypted video streaming from a video camera. In addition to supporting hardware-backed isolates -- like AWS Nitro Enclaves and Arm Confidential Computing Architecture Realms -- Veracruz also provides pragmatic "software isolates" on Armv8-A devices without hardware Confidential Computing capability, using the high-assurance seL4 microkernel and our IceCap framework.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
