一句话：评估将遗留代码移植到 Intel SGX enclave 的现有方法。
Intel SGX 提供一种基于 enclaved execution 的抽象，使应用能将代码和数据与包括最高特权系统软件在内的强敌手隔离。SGX 架构只暴露创建 enclave 所需的低层 ISA 指令，如何用这些指令编写应用仍由软件社区自行解决。论文关注将遗留代码移植到 SGX enclave 的问题，并对已有移植方法进行评估；其动机是让既有软件无需重写即可获得 enclave 的隔离保证。不过，给定摘要未展开具体评估方法、比较指标与实验结论。
The Intel Security Guard Extensions (SGX) architecture enables the abstraction of enclaved execution, using which an application can protect its code and data from powerful adversaries, including system software that executes with the highest processor privilege. While the Intel SGX architecture exports an ISA with low-level instructions that enable applications to create enclaves, the task of writing applications using this ISA has been left to the software community.
DOI 原文 ·
@inproceedings{paperbot5768,
title = {An evaluation of methods to port legacy code to SGX enclaves},
author = {Kripa Shanker and Arun Joseph and Vinod Ganapathy},
booktitle = {FSE},
year = {2020},
doi = {10.1145/3368089.3409726}
}