A comparison study of intel SGX and AMD memory encryption technology
A comparison study of intel SGX and AMD memory encryption technology
复制标题
DOI：
10.1145/3214292.3214301
复制
发表时间：
2018-06
期刊：
影响因子：
--
通讯作者：
S. Mofrad;Fengwei Zhang;Shiyong Lu;W. Shi
中科院分区：
文献类型：
--
作者：
S. Mofrad;Fengwei Zhang;Shiyong Lu;W. Shi
硬件辅助的可信执行环境是安全隔离技术，这些技术被设计成充当有效的防御机制，以在系统级别提供安全边界。硬件供应商已经推出了各种硬件辅助的可信执行环境，包括ARM TrustZone、Intel Management Engine和AMD Platform Security Processor。最近，英特尔软件保护扩展（SGX）和AMD内存加密技术已经推出。据我们所知，本文首次对英特尔SGX和AMD内存加密技术在功能、使用场景、安全性和性能影响方面进行了比较研究。我们总结了这两种方法的优点和缺点，相互比较。
Hardware-assisted trusted execution environments are secure isolation technologies that have been engineered to serve as efficient defense mechanisms to provide a security boundary at the system level. Hardware vendors have introduced a variety of hardware-assisted trusted execution environments including ARM TrustZone, Intel Management Engine, and AMD Platform Security Processor. Recently, Intel Software Guard eXtensions (SGX) and AMD Memory Encryption Technology have been introduced. To the best of our knowledge, this paper presents the first comparison study between Intel SGX and AMD Memory Encryption Technology in terms of functionality, use scenarios, security, and performance implications. We summarize the pros and cons of these two approaches in comparison to each other.