T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs

No abstract is available for this paper.

• Publication year

  2017

• Venue

  Network and Distributed System Security Symposium

• Publication date

  2017-06-21

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.14722/NDSS.2017.23193
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs

  2017cited by this paper
• SecureKeeper: Confidential ZooKeeper using Intel SGX

  2016cited by this paper
• Secure Content-Based Routing Using Intel Software Guard Extensions

  2016cited by this paper
• S-NFV: Securing NFV states by using SGX

  2016cited by this paper
• AsyncShock: Exploiting Synchronisation Bugs in Intel SGX Enclaves

  2016cited by this paper
• A design and verification methodology for secure isolated regions

  2016cited by this paper
• CaSE: Cache-Assisted Secure Execution on ARM Processors

  2016cited by this paper
• SGX-Enabled Oblivious Machine Learning

  2016cited by this paper
• Intel® Software Guard Extensions: EPID Provisioning and Attestation Services

  2016cited by this paper
• OpenSGX: An Open Platform for SGX Research

  2016cited by this paper
• Intel SGX Explained

  2016cited by this paper
• Sego: Pervasive Trusted Metadata for Efficiently Verified Untrusted System Services

  2016cited by this paper
• Sanctum: Minimal Hardware Extensions for Strong Software Isolation

  2016cited by this paper
• Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems

  2015influential reference
• M2R: Enabling Stronger Privacy in MapReduce Computation

  2015cited by this paper
• Raccoon: Closing Digital Side-Channels through Obfuscated Execution

  2015cited by this paper
• A First Step Towards Leveraging Commodity Trusted Execution Environments for Network Applications

  2015cited by this paper
• Protecting Data on Smartphones and Tablets from Memory Attacks

  2015cited by this paper
• Preventing Your Faults From Telling Your Secrets: Defenses Against Pigeonhole Attacks

  2015influential reference
• Last-Level Cache Side-Channel Attacks are Practical

  2015cited by this paper
• S$A: A Shared Cache Attack That Works across Cores and Defies VM Sandboxing -- and Its Application to AES

  2015cited by this paper
• Protecting Private Keys against Memory Disclosure Attacks Using Hardware Transactional Memory

  2015cited by this paper
• GhostRider: A Hardware-Software System for Memory Trace Oblivious Computation

  2015cited by this paper
• VC3: Trustworthy Data Analytics in the Cloud Using SGX

  2015cited by this paper
• Moat: Verifying Confidentiality of Enclave Programs

  2015cited by this paper
• Cooperation and security isolation of library OSes for multi-process applications

  2014cited by this paper
• Exploiting hardware transactional memory in main-memory databases

  2014cited by this paper
• Shielding Applications from an Untrusted Cloud with Haven

  2014influential reference
• TrustLite: a security architecture for tiny embedded devices

  2014cited by this paper
• Copker: Computing with Private Keys without RAM

  2014cited by this paper
• MiniBox: A Two-Way Sandbox for x86 Native Code

  2014cited by this paper
• Iago attacks: why the system call API is a bad untrusted RPC interface

  2013cited by this paper
• InkTag: secure applications on an untrusted operating system

  2013cited by this paper
• PHANTOM: practical oblivious computation in a secure processor

  2013cited by this paper
• OASIS: on achieving a sanctuary for integrity and secrecy on untrusted platforms

  2013cited by this paper
• ARMORED: CPU-Bound Encryption for Android-Driven ARM Devices

  2013cited by this paper
• SecureSwitch: BIOS-Assisted Isolation and Switch between Trusted and Untrusted Commodity OSes

  2012cited by this paper
• Cloud Terminal: Secure Access to Sensitive Applications from Untrusted Systems

  2012cited by this paper
• SICE: a hardware-level strongly isolated computing environment for x86 multi-core platforms

  2011cited by this paper
• Home is safer than the cloud!: privacy concerns for consumer cloud storage

  2011cited by this paper
• TRESOR Runs Encryption Securely Outside RAM

  2011cited by this paper
• SPORC: Group Collaboration using Untrusted Cloud Resources

  2010cited by this paper
• Depot: Cloud Storage with Minimal Trust

  2010cited by this paper
• TrustVisor: Efficient TCB Reduction and Attestation

  2010cited by this paper
• Security and Privacy Challenges in Cloud Computing Environments

  2010cited by this paper
• NOVA: a microhypervisor-based secure virtualization architecture

  2010cited by this paper
• TrInc: Small Trusted Hardware for Large Distributed Systems

  2009cited by this paper
• Fully homomorphic encryption using ideal lattices

  2009cited by this paper
• Practical Mitigations for Timing-Based Side-Channel Attacks on Modern x86 Processors

  2009cited by this paper
• Flicker: an execution infrastructure for tcb minimization

  2008cited by this paper
• Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems

  2008cited by this paper
• Intel ® 64 and IA-32 Architectures Software Developer ’ s Manual

  2006cited by this paper
• Secure Untrusted Data Repository (SUNDR)

  2004cited by this paper
• Self-paging in the Nemesis operating system

  1999cited by this paper
• Transactional Memory: Architectural Support For Lock-free Data Structures

  1993influential reference
• This paper is included in the Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI ’16).

  year unknowncited by this paper
• This Paper Is Included in the Proceedings of the 12th Usenix Symposium on Operating Systems Design and Implementation (osdi '16). Ryoan: a Distributed Sandbox for Untrusted Computation on Secret Data Ryoan: a Distributed Sandbox for Untrusted Computation on Secret Data

  year unknowncited by this paper

• Complementing Confidential Computing Environment for Applications on Arm CCA

  2026cites this paper
• HiveTEE: Scalable and Fine-Grained Isolated Domains With RME and MTE Co-Assisted

  2026cites this paper
• Efficient Multiuser Searchable and Revocable Data Sharing Scheme for IoV

  2026cites this paper
• Secure Acceleration of Aggregation Queries Over Homomorphically Encrypted Databases

  2026cites this paper
• A Decade in Software-Based Side and Covert Channel Attacks and Countermeasures: A Survey

  2025cites this paper
• Bringing Smart Contract Confidentiality via Trusted Hardware: Fact and Fiction

  2025cites this paper
• DPCapsule: A Decentralized Private Computing System With Self-Controlled Data

  2025cites this paper
• Hide Yourself: Multi-Dimensional Range Queries for Responses-Hiding Over Outsourced Data

  2025cites this paper
• ShieldMMU: Detecting and Defending against Controlled-Channel Attacks in Shielding Memory System

  2025influential citation
• Lixom: Protecting Encryption Keys with Execute-Only Memory

  2025cites this paper
• Verifiable, Efficient and Confidentiality-Preserving Graph Search with Transparency

  2025cites this paper
• AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX

  2025cites this paper
• Secure phasing of private genomes in a trusted execution environment with TX-Phase

  2025cites this paper
• Memory Under Siege: A Comprehensive Survey of Side-Channel Attacks on Memory

  2025cites this paper
• TEE-Assisted Recovery and Upgrades for Long-Running BFT Services

  2025cites this paper
• TLBlur: Compiler-Assisted Automated Hardening against Controlled Channels on Off-the-Shelf Intel SGX Platforms

  2025influential citation
• Beyond Access Pattern: Efficient Volume-Hiding Multi-Range Queries Over Outsourced Data Services

  2025cites this paper
• HEALTH+: Empowering Individuals via Unifying Health Data

  2025cites this paper
• Activation Functions Considered Harmful: Recovering Neural Network Weights through Controlled Channels

  2025cites this paper
• Trusted Execution Environments for Blockchain: Toward Robust, Private, and Scalable Distributed Ledgers

  2025cites this paper
• INCOGNITOS: A Practical Unikernel Design for Full-System Obfuscation in Confidential Virtual Machines

  2025influential citation
• OBLIVIATOR: Oblivious Parallel Joins and other Operators in Shared Memory Environments

  2025cites this paper
• Pave: Information Flow Control for Privacy-preserving Online Data Processing Services

  2025cites this paper
• Efficient Memory Side-Channel Protection for Embedding Generation in Machine Learning

  2025cites this paper
• DedupChain: A Secure Blockchain-Enabled Storage System With Deduplication for Zero-Trust Network

  2025cites this paper
• TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments when Attackers Have Pre-Trained Models

  2024cites this paper
• Lightweight, Secure and Stateful Serverless Computing with PSL

  2024cites this paper
• Veiled Pathways: Investigating Covert and Side Channels Within GPU Uncore

  2024cites this paper
• Agora: Trust Less and Open More in Verification for Confidential Computing

  2024cites this paper
• SecPaging: Secure Enclave Paging with Hardware-Enforced Protection against Controlled-Channel Attacks

  2024cites this paper
• Pandora: Principled Symbolic Validation of Intel SGX Enclave Runtimes

  2024cites this paper
• H2O2RAM: A High-Performance Hierarchical Doubly Oblivious RAM

  2024cites this paper
• Tutorial: Information Leakage from Cryptographic Techniques

  2024cites this paper
• Protecting Confidentiality, Privacy and Integrity in Collaborative Learning

  2024cites this paper
• Confidential Computing on Heterogeneous CPU-GPU Systems: Survey and Future Directions

  2024cites this paper
• Protecting Confidential Virtual Machines from Hardware Performance Counter Side Channels

  2024cites this paper
• The unresolved need for dependable guarantees on security, sovereignty, and trust in data ecosystems

  2024cites this paper
• Distributed & Scalable Oblivious Sorting and Shuffling

  2024cites this paper
• Advancing Web 3.0: Making Smart Contracts Smarter on Blockchain

  2024cites this paper
• Armor: Protecting Software Against Hardware Tracing Techniques

  2024cites this paper
• SENSE: Enhancing Microarchitectural Awareness for TEEs via Subscription-Based Notification

  2024influential citation
• Efficient Execution of Arbitrarily Complex Cross-Shard Contracts for Blockchain Sharding

  2024cites this paper
• TVRAVNF: an efficient low-cost TEE-based virtual remote attestation scheme for virtual network functions

  2024cites this paper
• ORTOA: A Family of One Round Trip Protocols For Operation-Type Obliviousness

  2024cites this paper
• SoK: SGX.Fail: How Stuff Gets eXposed

  2024cites this paper
• SmartNIC Security Isolation in the Cloud with S-NIC

  2024cites this paper
• Plug Your Volt: Protecting Intel Processors against Dynamic Voltage Frequency Scaling based Fault Attacks

  2024cites this paper
• TrustZoneTunnel: A Cross-World Pattern History Table-Based Microarchitectural Side-Channel Attack

  2024cites this paper
• One System Call Hook to Rule All TEE OSes in the Cloud

  2024cites this paper
• Confidential Computing on Heterogeneous Systems: Survey and Implications

  2024cites this paper
• A Survey on Network Slicing Security: Attacks, Challenges, Solutions and Research Directions

  2024cites this paper
• Towards Sustainable Trust: A Practical SGX Aided Anonymous Reputation System

  2024cites this paper
• RouTEE: Secure, Scalable, and Efficient Off-Chain Payments using Trusted Execution Environments

  2024cites this paper
• Obelix: Mitigating Side-Channels Through Dynamic Obfuscation

  2024cites this paper
• To Share or Hide: Confidential Model Compilation as a Service with Privacy-Preserving Transparency

  2024cites this paper
• Enabling secure data-driven applications: an approach to personal data management using trusted execution environments

  2024cites this paper
• Interface-Based Side Channel in TEE-Assisted Networked Services

  2024cites this paper
• Tee-based key-value stores: a survey

  2024cites this paper
• Toward Aggregated Payment Channel Networks

  2024cites this paper
• A Survey of Hardware Improvements to Secure Program Execution

  2024cites this paper
• Transient-Execution Attacks: A Computer Architect Perspective

  2023cites this paper
• Software-Defined CPU Modes

  2023cites this paper
• TALUS: Reinforcing TEE Confidentiality with Cryptographic Coprocessors (Technical Report)

  2023influential citation
• Privacy-preserving Attestation for Virtualized Network Infrastructures

  2023cites this paper
• Detecting and Mitigating Cache Side Channel Threats on Intel SGX

  2023cites this paper
• CBDC-AquaSphere: Interoperable Central Bank Digital Currency Built on Trusted Computing and Blockchain

  2023cites this paper
• Efficient Bi-objective SQL Optimization for Enclaved Cloud Databases with Differentially Private Padding

  2023cites this paper
• Cracking-Like Join for Trusted Execution Environments

  2023cites this paper
• Layered Binary Templating

  2023cites this paper
• FLARE: A Fast, Secure, and Memory-Efficient Distributed Analytics Framework (Flavor: Systems)

  2023cites this paper
• Attribute-based encryption with enforceable obligations

  2023cites this paper
• SODA: A Set of Fast Oblivious Algorithms in Distributed Secure Data Analytics

  2023cites this paper
• SWAT: A System-Wide Approach to Tunable Leakage Mitigation in Encrypted Data Stores

  2023cites this paper
• A Dual Security Protection Mechanism for Cloud-Based Data Storage and Sharing

  2023cites this paper
• SvTPM: SGX-Based Virtual Trusted Platform Modules for Cloud Computing

  2023cites this paper
• Scalable and Secure Virtualization of HSM With ScaleTrust

  2023cites this paper
• Veil: A Protected Services Framework for Confidential Virtual Machines

  2023cites this paper
• GraphOS: Towards Oblivious Graph Processing

  2023cites this paper
• Hardware-hardened Sandbox Enclaves for Trusted Serverless Computing

  2023cites this paper
• Puppy: A Publicly Verifiable Watermarking Protocol

  2023cites this paper
• QuanShield: Protecting against Side-Channels Attacks using Self-Destructing Enclaves

  2023influential citation
• ChaosINTC: A Secure Interrupt Management Mechanism against Interrupt-based Attacks on TEE

  2023influential citation
• Securing TEEs With Verifiable Execution Contracts

  2023cites this paper
• No Forking Way: Detecting Cloning Attacks on Intel SGX Applications

  2023cites this paper
• RIPencapsulation: Defeating IP Encapsulation on TI MSP Devices

  2023cites this paper
• CommiTEE : An Efficient and Secure Commit-Chain Protocol using TEEs

  2023cites this paper
• The Right To Be Forgotten and Educational Data Mining: Challenges and Paths Forward

  2023cites this paper
• AEX-Notify: Thwarting Precise Single-Stepping Attacks through Interrupt Awareness for Intel SGX Enclaves

  2023influential citation
• SHELTER: Extending Arm CCA with Isolation in User Space

  2023cites this paper
• The Path to Defence: A Roadmap to Characterising Data Poisoning Attacks on Victim Models

  2023cites this paper
• An Extensible Orchestration and Protection Framework for Confidential Cloud Computing

  2023cites this paper
• MVAM: Multi-variant Attacks on Memory for IoT Trust Computing

  2023cites this paper
• SEV-Step: A Single-Stepping Framework for AMD-SEV

  2023cites this paper
• DeCloak: Enable Secure and Cheap Multi-Party Transactions on Legacy Blockchains by a Minimally Trusted TEE Network

  2022cites this paper
• EnShare: Sharing Files Securely and Efficiently in the Cloud using Enclave

  2022cites this paper
• S-Blocks: Lightweight and Trusted Virtual Security Function With SGX

  2022cites this paper
• DyMAP: Defeating SGX Controlled Channel Attacks with Dynamic Memory Access Patterns

  2022influential citation
• MoLE: Mitigation of Side-channel Attacks against SGX via Dynamic Data Location Escape

  2022influential citation
• Cloak: Transitioning States on Legacy Blockchains Using Secure and Publicly Verifiable Off-Chain Multi-Party Computation

  2022cites this paper
• Confidential High-Performance Computing in the Public Cloud

  2022influential citation