Survey of Attacks and Defenses against SGX
Survey of Attacks and Defenses against SGX
复制标题
针对新交所的攻击和防御调查
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Huan Han
中科院分区：
文献类型：
--
作者：
Yahui Zhang;Min Zhao;Tingquan Li;Huan Han
海量的信息给我们带来了便利的生活。同时，如何防止恶意攻击者窃取用户数据或隐私，是当前信息安全研究的热点和难点问题。2013年，英特尔在HASP大会上提出了新的处理器安全技术SGX(Software Guard Extensions)，该技术可以在计算平台上提供一个名为Enclave的可信区域，以保护用户代码和数据的机密性和完整性。SGX是信息安全领域的突破性研究成果，对云计算平台的个人用户和租户具有重要意义。为了更好地研究针对SGX的攻击和防御技术，介绍了针对SGX攻击的威胁模型，总结了针对SGX的攻击类型，分析了针对SGX攻击的防御措施，并对未来可能针对SGX的攻击和防御技术进行了探讨。
The great abundance of information brings us convenient life. At the same time, how to prevent malicious attackers from stealing user data or privacy is a hot and difficult issue in the current research of information security. In 2013, Intel proposed a new processor security technology SGX(Software Guard Extensions) at the HASP conference, which can provide a trusted zone named enclave on the computing platform to protect the confidentiality and integrity of user code and data. SGX is a breakthrough research achievement in the field of information security, which is of great significance to individual users and tenants of cloud computing platforms. In order to better study the attacks and defense technologies against SGX, the threat model against SGX attacks is introduced, the types of attacks against SGX are summarized, the defense measures against SGX attacks are analyzed, and the possible future attacks against SGX and the Defense technology was explored.