English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

With the proliferation of Trusted Execution Environments (TEEs) such as IntelSGX, a number of cloud providers will soon introduce TEE capabilities withintheir offering (e.g., Microsoft Azure). Although the integration of SGX withinthe cloud considerably strengthens the threat model for cloud applications, thecurrent model to deploy and provision enclaves prevents the cloud operator fromadding or removing enclaves dynamically - thus preventing elasticity forTEE-based applications in the cloud.  In this paper, we propose ReplicaTEE, a solution that enables seamlessprovisioning and decommissioning of TEE-based applications in the cloud.ReplicaTEE leverages an SGX-based provisioning layer that interfaces with aByzantine Fault-Tolerant storage service to securely orchestrate enclavereplication in the cloud, without the active intervention of the applicationowner. Namely, in ReplicaTEE, the application owner entrusts application secretto the provisioning layer; the latter handles all enclave commissioning andde-commissioning operations throughout the application lifetime. We analyze thesecurity of ReplicaTEE and show that it is secure against attacks by a powerfuladversary that can compromise a large fraction of the cloud infrastructure. Weimplement a prototype of ReplicaTEE in a realistic cloud environment andevaluate its performance. ReplicaTEE moderately increments the TCB by ~800 LoC.Our evaluation shows that ReplicaTEE does not add significant overhead toexisting SGX-based applications.

ReplicaTEE: Enabling Seamless Replication of SGX Enclaves in the Cloud