Authors:
Newton Will
1
and
Carlos Maziero
2
Affiliations:
1
Computer Science Department, Federal University of Technology, Paraná, Dois Vizinhos, Brazil
;
2
Computer Science Department, Federal University of Paraná, Curitiba, Brazil
Keyword(s):
Intel SGX, Programming Models, Software Architecture, Performance, Resource Optimization.
Abstract:
Data confidentiality is becoming increasingly important to computer users, both in corporate and personal environments. In this sense, there are several solutions proposed to maintain the confidentiality and integrity of such data, among them the Intel Software Guard Extensions (SGX) architecture. The use of such mechanisms to provide confidentiality and integrity for sensitive data imposes a performance cost on the application execution, due to the restrictions and checks imposed by the Intel SGX architecture. Thus, the efficient use of SGX enclaves requires some management. The present work presents two management models for using SGX enclaves: (i) enclave sharing; and (ii) enclave pool. In order to apply such models, an enclave provider architecture is proposed, offering a decoupling between the enclave and the application, allowing to apply the proposed management models and offering the resources provided by the enclaves to the applications through an “as a service” approach. A
prototype was built to evaluate the proposed architecture and management models; the experiments demonstrated a considerable reduction in the performance impact for enclave allocation, while guaranteeing good response times to satisfy simultaneous requests.
(More)