Главная
Study mode:
on
1
Intro
2
Enclave / TEE (Trusted Execution Environment)
3
Existing Enclaves and Usages in Cloud
4
Restrictions of Current Enclaves
5
Non-scalable Secure Memory Protection
6
Scalable Memory Protection: Overview
7
Non-scalable Memory Isolation
8
Fine-grained Flexible Memory Isolation
9
Guarded Page Table (GPT)
10
Non-scalable Integrity Protection
11
Scale the Traditional Merkle Tree
12
Mountable Merkle Tree (MMT)
13
Non-scalable Memory Initialization
14
Boost Secure Memory Initialization
15
Evaluation
16
Enclave Startup Latency
17
Conclusion
Description:
Explore a 14-minute conference talk from USENIX OSDI '21 that delves into scalable memory protection in the PENGLAI Enclave. Learn about innovative software-hardware co-design techniques addressing limitations in secure memory protection for cloud-based applications. Discover two new hardware primitives: Guarded Page Table (GPT) and Mountable Merkle Tree (MMT), which enable dynamic, fine-grained, and large-scale secure memory with fast initialization. Understand how these advancements support thousands of concurrent enclaves, improve resource utilization, and eliminate high-cost initialization using fork-style enclave creation. Examine the implementation results, including support for 1,000s of concurrent enclave instances, scalability up to 512GB secure memory, and significant performance improvements in memory initialization and real-world applications like MapReduce.

Scalable Memory Protection in the PENGLAI Enclave

USENIX
Add to list
0:00 / 0:00