English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Hardware-assisted trusted execution environments (TEEs) are critical buildingblocks of many modern applications. However, they have a one-way isolationmodel that introduces a semantic gap between a TEE and its outside world. Thislack of information causes an ever-increasing set of attacks on TEE-enabledapplications that exploit various insecure interactions with the host OSs,applications, or other enclaves. We introduce Sirius, the firstcompartmentalization framework that achieves strong isolation and securesharing in TEE-assisted applications by controlling the dataflows withinprimary kernel objects (e.g. threads, processes, address spaces, files,sockets, pipes) in both the secure and normal worlds. Sirius replaces ad-hocinteractions in current TEE systems with a principled approach that adds stronginter- and intra-address space isolation and effectively eliminates a widerange of attacks. We evaluate Sirius on ARM platforms and find that it islightweight ($\approx 15K$ LoC) and only adds $\approx 10.8\%$ overhead toenable TEE support on applications such as httpd, and improves the performanceof existing TEE-enabled applications such as the Darknet ML framework and ARM'sLibDDSSec by $0.05\%-5.6\%$.

Enclave-Aware Compartmentalization and Secure Sharing with Sirius