English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

Application size and complexity are the underlying cause of numerous securityvulnerabilities in code. In order to mitigate the risks arising from suchvulnerabilities, various techniques have been proposed to isolate the executionof sensitive code from the rest of the application and from other software onthe platform (e.g. the operating system). However, even with these partitioningtechniques, it is not immediately clear exactly how they can and should be usedto partition applications. What overall partitioning scheme should be followed;what granularity of the partitions should be. To some extent, this is dependenton the capabilities and performance of the partitioning technology in use. Forthis work, we focus on the upcoming Intel Software Guard Extensions (SGX)technology as the state-of-the-art in this field. SGX provides a trustedexecution environment, called an enclave, that protects the integrity of thecode and the confidentiality of the data inside it from other software,including the operating system. We present a novel framework consisting of fourpossible schemes under which an application can be partitioned. These schemesrange from coarse-grained partitioning, in which the full application isincluded in a single enclave, through ultra-fine partitioning, in which eachapplication secret is protected in an individual enclave. We explain thespecific security benefits provided by each of the partitioning schemes anddiscuss how the performance of the application would be affected. To comparethe different partitioning schemes, we have partitioned OpenSSL using fourdifferent schemes. We discuss SGX properties together with the implications ofour design choices in this paper.

Securing Application with Software Partitioning: A case study using SGX