During CCS 2017, Taesoo Kim (Georgia Tech), Zhiqiang Lin (UT Dallas) and Chia-Che Tsai (Stony Brook University / UC Berkeley) together gave an overall tutorial on Intel SGX technology. The tutorial’s contents are well organized and presented by SGX experts in the acadamia. We believe that this tutorial serves as a perfect entry point to understand the background of SGX technology.
This tutorial consists of three parts, including:
-
SGX 101: introduction, performance, and applications
-
SGX shielding framework and development tools
-
SGX Security Issues
Presentation slides and demo videos are available here.
In this tutorial, Zhiqiang Lin first introduced the basic concepts of Intel SGX, its development workflows, potential applications and performance characteristics. Then, Chia-Che Tsai introduced various ways to quickly start writing SGX applications, specifically by utilizing library OSes or thin shielding layers; he explaind the pros and cons of each approach in terms of security and usability. Last but not least, Taesoo Kim explained known security concerns, including cache/branch side-channel attacks and memory safety issues, and corresponding defenses with various working demos.
SGX 101: introduction, performance, and applications (Zhiqiang Lin)
SGX shielding framework and development tools (Chia-Che Tsai)
SGX Security Issues (Taesoo Kim)
Demo Videos
02-demo-libos:
ELEOS_memcached_native_sgx
ELEOS_memcached_rpc
ELEOS_memcached_suvm
Graphene_Container_DEMO
Graphene_EDMM_DEMO
Graphene_GCC_DEMO
SCONE_DEMO_helloworld
03-demo-security:
branch-shadowing
darkrop
sgx-pagetable-attack
sgx-shield
sgxbleed
sgxbomb
tsgx