On the Performance of Intel SGX
On the Performance of Intel SGX
复制标题
论Intel SGX的性能
DOI：
10.1109/wisa.2016.45
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Chunxiao Xing
中科院分区：
文献类型：
--
作者：
Chongchong Zhao;Daniyaer Saifuding;H. Tian;Yong Zhang;Chunxiao Xing
随着云计算在各个领域的广泛应用，越来越多的个人和组织开始考虑将数据外包到公有云上。然而，云数据的安全性已经成为许多客户最为关注的问题，尤其是那些拥有大量有价值和敏感数据的客户。虽然提出了同态加密等技术来解决数据的安全问题，但其效果仍不理想。随着英特尔SGX处理器的出现，它旨在以硬件辅助的方式彻底消除云环境的安全问题，它给我们带来了许多关于它的特性和它对于当前云平台的实用性的问题。为了评估Intel SGX的潜在影响，我们分析了当前的SGX编程模式，并推断了一些可能导致开销的因素。为了验证我们的性能假设，我们通过一系列基准测试对SGX的性能进行了系统的研究。在分析实验结果之后，我们执行了工作负载表征，以帮助程序员更好地利用英特尔SGX的当前可用性并确定可行的研究方向。
As cloud computing is widely used in various fields, more and more individuals and organizations are considering outsourcing data to the public cloud. However, the security of the cloud data has become the most prominent concern of many customers, especially those who possess a large volume of valuable and sensitive data. Although some technologies like Homomorphic Encryption were proposed to solve the problem of secure data, the result is still not satisfying. With the advent of Intel SGX processor, which aims to thoroughly eliminate the security concern of cloud environment in a hardware-assisted approach, it brings us a number of questions on its features and its practicability for the current cloud platform. To evaluate the potential impact of Intel SGX, we analyzed the current SGX programming mode and inferred some possible factors that may arise the overhead. To verify our performance hypothesis, we conducted a systematic study on SGX performance by a series of benchmark experiments. After analyzing the experiment result, we performed a workload characterization to help programmer better exploit the current availability of Intel SGX and identify feasible research directions.