CCS'17 Tutorial

During CCS 2017, Taesoo Kim (Georgia Tech), Zhiqiang Lin (UT Dallas) and Chia-Che Tsai (Stony Brook University / UC Berkeley) together gave an overall tutorial on Intel SGX technology. The tutorial's contents are well organized and presented by SGX experts in the academia. We believe that this tutorial serves as a perfect entry point to understand the background of SGX technology.

This tutorial consists of three parts, including:

  1. SGX 101: introduction, performance, and applications

  2. SGX shielding framework and development tools

  3. SGX Security Issues

Presentation slides and demo videos are available herearrow-up-right.

In this tutorial, Zhiqiang Lin first introduced the basic concepts of Intel SGX, its development workflows, potential applications and performance characteristics. Then, Chia-Che Tsai introduced various ways to quickly start writing SGX applications, specifically by utilizing library OSes or thin shielding layers; he explained the pros and cons of each approach in terms of security and usability. Last but not least, Taesoo Kim explained known security concerns, including cache/branch side-channel attacks and memory safety issues, and corresponding defenses with various working demos.

SGX 101: introduction, performance, and applications (Zhiqiang Lin)

SGX shielding framework and development tools (Chia-Che Tsai)

SGX Security Issues (Taesoo Kim)

Demo Videos

02-demo-libos:

ELEOS_memcached_native_sgx

ELEOS_memcached_rpc

ELEOS_memcached_suvm

Graphene_Container_DEMO

Graphene_EDMM_DEMO

Graphene_GCC_DEMO

SCONE_DEMO_helloworld

03-demo-security:

branch-shadowing

darkrop

sgx-pagetable-attack

sgx-shield

sgxbleed

sgxbomb

tsgx

Last updated