CI-P: Collaborative: Planning for a Community-Driven Open Research Infrastructure to Support Secure Computing Research involving Intel SGX

在过去，在设计系统的安全性时，操作系统一直被认为是可信计算基础(TCB)的一部分。但是，随着最近向云计算的转变，迫切需要将操作系统排除在可信计算基础之外。英特尔软件保护扩展(SGX)是一项很有前途的新技术，具有解决这一问题的巨大潜力。然而，它的基础设施、工具和开发生态系统是以封闭的方式开发的。该项目旨在发起社区努力，开发开放的研究基础设施并支持英特尔SGX。特别是，这项工作将启动一个长期计划，以开发、增强和维护一个开源项目OpenSGX，专注于开发一个系统仿真器、支持SGX的应用程序、库、内核驱动程序等，以支持其生态系统。作为一个开源的研究基础设施，所有的代码和文档都将被公开共享和维护。

Historically,when designing the security of a system, operating systems have been considered a part of the trusted computing base (TCB).However, with the recent shift to cloud computing, there is a pressing need to exclude the OS from the TCB. The Intel Software Guard Extensions (SGX) is a promising new technology that has a great potential to solve this problem. However, its infrastructure, tools, and development ecosystems are developed in a closed manner.This project is to initiate a community effort in developing an open research infrastructure and support for Intel SGX. In particular, the work will initiate a long-term plan to develop, enhance, and maintain an open source project, OpenSGX, focusing on developing a system emulator, SGX-enabled applications, libraries, kernel drivers, etc., to support its ecosystem. Being an open source research infrastructure, all of the code and documentation will be publicly shared and maintained.