English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

The big data industry is facing new challenges as concerns about privacyleakage soar. One of the remedies to privacy breach incidents is to encapsulatecomputations over sensitive data within hardware-assisted Trusted ExecutionEnvironments (TEE). Such TEE-powered software is called secure enclaves. Secureenclaves hold various advantages against competing for privacy-preservingcomputation solutions. However, enclaves are much more challenging to buildcompared with ordinary software. The reason is that the development of TEEsoftware must follow a restrictive programming model to make effective use ofstrong memory encryption and segregation enforced by hardware. Theseconstraints transitively apply to all third-party dependencies of the software.If these dependencies do not officially support TEE hardware, TEE developershave to spend additional engineering effort in porting them. High developmentand maintenance cost is one of the major obstacles against adopting TEE-basedprivacy protection solutions in production. In this paper, we present ourexperience and achievements with regard to constructing and continuouslymaintaining a third-party library supply chain for TEE developers. Inparticular, we port a large collection of Rust third-party libraries into IntelSGX, one of the most mature trusted computing platforms. Our supply chainaccepts upstream patches in a timely manner with SGX-specific securityauditing. We have been able to maintain the SGX ports of 159 open-source Rustlibraries with reasonable operational costs. Our work can effectively reducethe engineering cost of developing SGX enclaves for privacy-preserving dataprocessing and exchange.

Building and Maintaining a Third-Party Library Supply Chain for Productive and Secure SGX Enclave Development