English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Intel SGX (Software Guard Extension) is a promising TEE (trusted executionenvironment) technique that can protect programs running in user space frombeing maliciously accessed by the host operating system. Although it provideshardware access control and memory encryption, the actual effectiveness alsodepends on the quality of the software. In particular, improper implementationof a code snippet running inside the enclave may still leak private data due tothe invalid use of pointers. This paper serves as a first attempt to study theprivacy leakage issues of enclave code and proposes a novel static sparse taintanalysis approach to detect them. We first summarize five common patterns ofleakage code. Based on these patterns, our approach performs forward analysisto recognize all taint sinks and then employs a backward approach to detectleakages. Finally, we have conducted experiments with several open-sourceenclave programs and found 78 vulnerabilities previously unknown in 13projects.

STELLA: Sparse Taint Analysis for Enclave Leakage Detection