CI-P: Collaborative: A Community-Driven Open Research Infrastructure for Intel SGX

从历史上看，在设计系统安全性时，操作系统一直被认为是可信计算基础（TCB）的一部分。然而，随着最近向云计算的转变，迫切需要将操作系统排除在TCB之外。英特尔软件保护扩展（SGX）是一项很有前途的新技术，它有很大的潜力来解决这个问题。然而，它的基础设施、工具和开发生态系统是以封闭的方式开发的。该项目旨在发起一个社区努力，为英特尔SGX开发一个开放的研究基础设施和支持。特别是，这项工作将启动一项长期计划，以开发、增强和维护一个开源项目OpenSGX，重点是开发一个系统模拟器、支持sgx的应用程序、库、内核驱动程序等，以支持其生态系统。作为一个开源的研究基础设施，所有的代码和文档都将被公开共享和维护。

Historically,when designing the security of a system, operating systems have been considered a part of the trusted computing base (TCB).However, with the recent shift to cloud computing, there is a pressing need to exclude the OS from the TCB. The Intel Software Guard Extensions (SGX) is a promising new technology that has a great potential to solve this problem. However, its infrastructure, tools, and development ecosystems are developed in a closed manner.This project is to initiate a community effort in developing an open research infrastructure and support for Intel SGX. In particular, the work will initiate a long-term plan to develop, enhance, and maintain an open source project, OpenSGX, focusing on developing a system emulator, SGX-enabled applications, libraries, kernel drivers, etc., to support its ecosystem. Being an open source research infrastructure, all of the code and documentation will be publicly shared and maintained.