kth.sePublikationer
Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Faster enclave transitions for IO-intensive network applications
KTH.
Lund Univ, Lund, Sweden.;RISE Cybersecur, Stockholm, Sweden..
RISE Cybersecur, Stockholm, Sweden..
2021 (Engelska)Ingår i: PROCEEDINGS OF THE 2021 ACM SIGCOMM WORKSHOP ON SECURE PROGRAMMABLE NETWORK INFRASTRUCTURE (SPIN '21), Association for Computing Machinery (ACM) , 2021, s. 1-8Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

Process-based confidential computing enclaves such as Intel SGX have been proposed for protecting the confidentiality and integrity of network applications, without the overhead of virtualization. However, these solutions introduce other types of overhead, particularly the cost transitioning in and out of an enclave context. This makes the use of enclaves impractical for running IO-intensive applications, such as network packet processing. We build on earlier approaches to improve the IO performance of workloads in Intel SGX enclaves and propose the HotCall-Bundler library that helps reduce the cost of individual single enclave transitions and the total number of enclave transitions in trusted applications running in Intel SGX enclaves. We describe the implementation of the HotCall-Bundler library, evaluate its performance and demonstrate its practicality using the case study of Open vSwitch, a widely used software switch implementation.

Ort, förlag, år, upplaga, sidor
Association for Computing Machinery (ACM) , 2021. s. 1-8
Nyckelord [en]
Open vSwitch, SGX, Hardware security, Performance optimization
Nationell ämneskategori
Datavetenskap (datalogi) Datorsystem
Identifikatorer
URN: urn:nbn:se:kth:diva-310532DOI: 10.1145/3472873.3472879ISI: 000769076000001Scopus ID: 2-s2.0-85117508284OAI: oai:DiVA.org:kth-310532DiVA, id: diva2:1649806
Konferens
2nd ACM SIGCOMM Workshop on Secure Programmable Network Infrastructure (SPIN), AUG 23, 2021, ELECTR NETWORK
Anmärkning

Part of proceedings: ISBN 978-1-4503-8637-1

QC 20220405

Tillgänglig från: 2022-04-05 Skapad: 2022-04-05 Senast uppdaterad: 2023-01-18Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltextScopus

Person

Svenningsson, Jakob

Sök vidare i DiVA

Av författaren/redaktören
Svenningsson, Jakob
Av organisationen
KTH
Datavetenskap (datalogi)Datorsystem

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetricpoäng

doi
urn-nbn
Totalt: 25 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf