SGX-Bundler: speeding up enclave transitions for IO-intensive applications
2022 (Engelska) Ingår i: Proceedings - 22nd IEEE/ACM International Symposium on Cluster, Cloud and Internet Computing, CCGrid 2022 / [ed] Fazio, M Panda, DK Prodan, R Cardellini, V Kantarci, B Rana, O Villari, M, Institute of Electrical and Electronics Engineers (IEEE) , 2022, s. 269-278Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]
Process-based confidential computing enclaves such as Intel SGX can be used to protect the confidentiality and integrity of workloads, without the overhead of virtualisation. However, they introduce a notable performance overhead, especially when it comes to transitions in and out of the enclave context. Such overhead makes the use of enclaves impractical for running IO-intensive applications, such as network packet processing or biological sequence analysis. We build on earlier approaches to improve the IO performance of work-loads in Intel SGX enclaves and propose the SGX-Bundler library, which helps reduce the cost of both individual single enclave transitions well as of the total number of enclave transitions in trusted applications running in Intel SGX enclaves. We describe the implementation of the SGX-Bundler library, evaluate its performance and demonstrate its practicality using the case study of Open vSwitch, a widely used software switch implementation.
Ort, förlag, år, upplaga, sidor Institute of Electrical and Electronics Engineers (IEEE) , 2022. s. 269-278
Nyckelord [en]
SGX, Hardware security, Open vSwitch, Performance optimization
Nationell ämneskategori
Data- och informationsvetenskap
Identifikatorer URN: urn:nbn:se:kth:diva-319436 DOI: 10.1109/CCGrid54584.2022.00036 ISI: 000855065800028 Scopus ID: 2-s2.0-85135761247 OAI: oai:DiVA.org:kth-319436 DiVA, id: diva2:1699941
Konferens 22nd IEEE/ACM International Symposium on Cluster, Cloud and Internet Computing (CCGrid), May 16-19, 2022, Messina, Italy
Anmärkning QC 20220929
Part of proceedings: ISBN 978-1-6654-9956-9
2022-09-292022-09-292022-09-29 Bibliografiskt granskad