CI-P: Collaborative: A Community-Driven Open Research Infrastructure for Intel SGX

从历史上看，在设计系统的安全性时，操作系统一直被认为是可信计算基础（TCB）的一部分。然而，随着最近向云计算的转变，迫切需要将操作系统从TCB中排除。英特尔Software Guard Extensions（SGX）是一项很有前途的新技术，具有解决此问题的巨大潜力。然而，其基础设施、工具和开发生态系统是以封闭的方式开发的。该项目旨在发起社区努力，开发开放的研究基础设施并支持英特尔SGX。特别是，这项工作将启动一项长期计划，以开发、增强和维护一个开源项目OpenSGX，重点是开发一个系统仿真器、支持SGX的应用程序、库、内核驱动程序等，来支持它的生态系统。作为一个开源的研究基础设施，所有的代码和文档都将公开共享和维护。

Historically,when designing the security of a system, operating systems have been considered a part of the trusted computing base (TCB).However, with the recent shift to cloud computing, there is a pressing need to exclude the OS from the TCB. The Intel Software Guard Extensions (SGX) is a promising new technology that has a great potential to solve this problem. However, its infrastructure, tools, and development ecosystems are developed in a closed manner.This project is to initiate a community effort in developing an open research infrastructure and support for Intel SGX. In particular, the work will initiate a long-term plan to develop, enhance, and maintain an open source project, OpenSGX, focusing on developing a system emulator, SGX-enabled applications, libraries, kernel drivers, etc., to support its ecosystem. Being an open source research infrastructure, all of the code and documentation will be publicly shared and maintained.