SGX Official
- Intel SGX Home [Link] Code Samples and Tutorials [Link]
- Academic Research Papers on Intel's Website [Link]
this research is very hot. you can see a lot of papers in intel official's site.
SGX Basics
- Intel SGX Explained [PDF]
- Review of Side Channel Attacks on SGX, by Yueqiang, in Chinese [PDF]
Security of SGX
There are a lot of active and rapid researches on arXiv and IACR ePrint. Search the key word sgx or enclave.
- Controlled-Channel Attacks: Deterministic Side
Channels for Untrusted Operating Systems, IEEE S&P 2015 [PDF] [Slides]
the very first paper about the controlled side channel leakages, such as page fault, cache, and TCB
- Preventing Your Faults from Telling Your Secrets:
Defenses against Pigeonhole Attacks, asiaccs 2016 [PDF] [Slides]
a paper after the untrolled side channel attacks on SP. more the hardware countermeasures
- High Resolution Side Channels for Untrusted Operating Systems, USENIX ATC 2017 [PDF] [Slides] [Audio]
a paper after the untrolled side channel attacks on SP. more the hardware countermeasures
- Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing, USENIX 2017 [PDF]
- CacheZoom: How SGX Amplifies The Power of Cache Attacks, arXiv 2017 [PDF]
- Software Grand Exposure: SGX Cache Attacks Are Practical, USENIX WOOT 2017 [PDF]
- Malware Guard Extension: Using SGX to Conceal Cache Attacks, DIMVA 2017 [PDF]
- Stacco: Differentially Analyzing Side-Channel Traces for
Detecting SSL/TLS Vulnerabilities in Secure Enclaves, ccs 2017 [PDF] [Slides]
- Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX, ccs 2017 [PDF]
Security Applications using SGX
- Iron: Functional Encryption using Intel SGX [PDF] [Slides]
a nice paper in ccs2017. a formal and nice proof.
- Robust Synchronous P2P Primitives Using SGX Enclaves, by Yaoqi Jia [PDF] [Chinese]
SGX Countermeasures
- SGXIO: Generic Trusted I/O Path for Intel SGX, CODASPY 2017 [PDF]
- HardIDX: Practical and Secure Index with SGX, DBSec 2017 [PDF]
- T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs, NDSS 2017 [PDF]
- SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs, NDSS 2017 [PDF]
|