Student | (visible for staff only) |
Supervisor | Dr. Nico Weichbrodt |
Professor | Prof. Dr. Rüdiger Kapitza |
Project | SERECA |
IBR Group | DS (Prof. Kapitza) |
Type | Master Thesis |
Status | finished |
IntroductionWith the rise of cloud computing in the last years, a need for secure computing on untrusted hosts has come up. To achieve this, Intel developed Secure Guard Extensions (SGX) [1,2] that allows developers to create secure compartments for their applications, called enclaves. Enclaves are a secure part of applications that can be entered to perform security critical computations while being guarded from an untrusted operating system and attackers by the processor itself. To ease development of enclaves, Intel released a Software Development Kit (SDK) [0]. Problem statementEnclaves are meant to be small, self-contained units. They can communicate with the untrusted side to pass data which is made easy by using the SDK. However, enclaves cannot communicate directly with each other as they cannot directly access each others memory. There is always an additional jump into the untrusted SDK runtime before entering an enclave and exiting an enclave, so transitioning from one enclave to another involves some overhead. Task descriptionIn this thesis, multiple ways of direct inter-enclave communication are to be developed and evaluated. The main task is to remove the overhead of the SDK by developing different techniques of inter-enclave communication. There already exist some ideas on how to achieve this, but no implementation work has been done so far. Prerequisites
Links[0] https://01.org/intel-softwareguard-extensions[1] https://software.intel.com/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx [2] https://software.intel.com/sites/default/files/managed/48/88/329298-002.pdf |
Vacancies of TU Braunschweig
Career Service' Job Exchange
Merchandising
Term Dates
Courses
Degree Programmes
Information for Freshman
TUCard
Technische Universität Braunschweig
Universitätsplatz 2
38106 Braunschweig
P. O. Box: 38092 Braunschweig
GERMANY
Phone: +49 (0) 531 391-0