IOTEE: Securing and analysing trusted execution beyond the CPU

可信执行环境（tee）允许用户在一个安全的环境中运行他们的软件，同时确保数据和应用程序的完整性和机密性。然而，如今的云计算严重依赖于外围设备，如gpu、nic和fpga。将CPU tee的安全保证扩展到这样的加速器目前是不可能的。人们提出了一些新技术来解决这个问题，特别是PCIe可信设备接口安全协议（TDISP）。IOTEE旨在评估这种新的PCIe标准的安全保证及其针对强大对手提供可信执行的能力。这将涉及为协议开发仿真器，使用形式化建模，以及研究针对各种软件和硬件攻击的对策。

Trusted Execution Environments (TEEs) allow users to run their software in a secure enclave while assuring the integrity and confidentiality of data and applications. However, cloud computing these days relies heavily on peripherals such as GPUs, NICs, and FPGAs. Extending the security guarantees of CPU TEEs to such accelerators is currently not possible. New technologies are being proposed to address this, notably the PCIe Trusted Device Interface Security Protocol (TDISP).IOTEE is aims to evaluate the security guarantees of this new PCIe standard and its ability to provide trusted execution against strong adversaries. This will involve developing an emulator for the protocol, the use of formal modelling, as well as researching countermeasures against various software and hardware attacks.