Skip to main content
Log in

Ensuring Secure Data Input/Output Operations for SGX ENCLAVE

  • Published:
Automatic Control and Computer Sciences Aims and scope Submit manuscript

Abstract—

This paper investigates the problem of ensuring secure input/output operations in the Intel SGX technology. The problem is extremely urgent, and its solution will make it possible to protect confidential user data from attacks from different malicious software while finding data outside the enclave. The authors present different methods for solving the posed problem developed by them. The complexity of the practical application of these methods as well as their main disadvantages and advantages are analyzed. The most preferred method which ensures secure storage and processing of data outside the enclave is also chosen.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Fig. 1.
Fig. 2.
Fig. 3.
Fig. 4.
Fig. 5.

Similar content being viewed by others

REFERENCES

  1. Intel® 64 and IA-32 Architectures Software Developer’s Manual Volume 3 (3A, 3B, 3C & 3D). https://www.intel.com/content/dam/www/public/us/en/documents/manuals/64-ia-32-architectures-software-developer-system-programming-manual-325384.pdf.

  2. Overview of Intel Software Guard Extensions Instructions and Data Structures. https://software.intel.com/en-us/ blogs/2016/06/10/overview-of-intel-software-guard-extensions-instructions-and-data-structures.

  3. Intel SGX Explained. https://eprint.iacr.org/2016/086.pdf.

  4. Shay Gueron, A Memory Encryption Engine Suitable for General Purpose Processors. https://eprint.iacr.org/ 2016/204.pdf.

  5. Usov, E.S., Nikol’skii, A.V., Pavlenko, E.Yu., and Zegzhda, D.P., Ensuring confidentiality of data of users of cloud systems using the Intel SGX technology, Sbornik materialov 15-i mezhdunarodnoi konferentsii Regional’naya informatika (RI 2016) (Proc. 15th Int. Conf. Reg. Inf. (RI 2016)), 2016.

  6. Zegzhda, D.P., Usov, E.S., Nikol’skii, A.V., and Pavlenko, E.Yu., Use of Intel SGX to ensure the confidentiality of data of cloud users, Autom. Control Comput. Sci., 2017, vol. 51, no. 8, pp. 848–854.

    Article  Google Scholar 

  7. Usov, E.S., Nikol’skii, A.V., Pavlenko, E.Yu., and Zegzhda, D.P., Organization of secure cloud computing using Intel SGX, Sbornik materialov 25-i nauchno-tekhnicheskoi konferentsii Metody i tekhnicheskie sredstva obespecheniya bezopasnosti informatsii (Proc. 25th Sci.-Tech. Conf. Methods and Technical Means for Ensuring Information Security), 2016.

  8. Usov, E.S., Nikol’skii, A.V., and Zegzhda, D.P., Ensuring safe data input/output operations for SGX Enclave, Sbornik materialov 26-i nauchno-tekhnicheskoi konferentsii Metody i tekhnicheskie sredstva obespecheniya bezopasnosti informatsii (Proc. 26th Sci. Tech. Conf. Methods and Technical Means for Ensuring Information Security), 2017.

  9. Xiaoyu Ruan, Platform Embedded Security Technology Revealed: Safeguarding the Future of Computing with Intel Embedded Security and Management Engine, 2014.

  10. Khalid Maklai, Intel® Identity Protection Technology (Intel® IPT) with PKI and Protected Transaction Display. https://software.intel.com/sites/default/files/managed/5f/4e/IPTwithPKI_ProtTransDisplay.pdf.

  11. Intel® Software Guard Extensions SDK for Windows* OS. https://software.intel.com/sites/default/files/managed/41/58/sgx-sdk-developer-reference-for-windows.pdf.

Download references

Author information

Authors and Affiliations

Authors

Corresponding authors

Correspondence to D. P. Zegzhda or E. Yu. Pavlenko.

Additional information

Translated by O. Pismenov

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Zegzhda, D.P., Usov, E.S., Nikol’skii, A.V. et al. Ensuring Secure Data Input/Output Operations for SGX ENCLAVE. Aut. Control Comp. Sci. 52, 1036–1041 (2018). https://doi.org/10.3103/S0146411618080321

Download citation

  • Received:

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.3103/S0146411618080321

Keywords:

Navigation