Hecate

Ge, Xinyang; Kuo, Hsuan-Chi; Cui, Weidong

doi:10.1145/3548606.3560592

Cited by 5 publications

(1 citation statement)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, COCOAEXPO provides the inductive proof of all future states via the attested execution policy. Hecate [20] uses AMD VM privilege levels (VMPLs) to run a nested hypervisor and a guest OS within the same AMD SEV-SNP isolated VM. This allows an unmodified guest OS to be run as a confidential VM, modulo kernel code integrity.…”

Section: Related Workmentioning

confidence: 99%

COCOAEXPO: Confidential Containers via Attested Execution Policies

Johnson¹,

Volos²,

Gordon³

et al. 2023

Preprint

View full text Add to dashboard Cite

Container-based technologies empower cloud tenants to develop highly portable software and deploy services in the cloud at a rapid pace. Cloud privacy, meanwhile, is important as a large number of container deployments operate on privacy-sensitive data, but challenging due to the increasing frequency and sophistication of attacks. State-of-the-art confidential container-based designs leverage process-based trusted execution environments (TEEs), but face security and compatibility issues that limits their practical deployment.We propose COCOAEXPO, an architecture that provides lift-and-shift deployment of unmodified containers while providing strong security protection against a powerful attacker who controls the untrusted host and hypervisor. COCOA-EXPO leverages VM-level isolation to execute a container group within a unique VM-based TEE. Besides container integrity and user data confidentiality and integrity, COCOA-EXPO also offers container attestation and execution integrity based on an attested execution policy. COCOAEXPO execution policies provide an inductive proof over all future states of the container group. This proof, which is established during initialization, forms a root of trust that can be used for secure operations within the container group without requiring any modifications of the containerized workflow itself (aside from the inclusion of the execution policy.)We evaluate COCOAEXPO on AMD SEV-SNP processors by running a diverse set of workloads demonstrating that workflows exhibit 0-26% additional overhead in performance over running outside the enclave, with a mean 13% overhead on SPEC2017, while requiring no modifications to their program code. Adding execution policies introduces less than 1% additional overhead.

show abstract

Section: Related Workmentioning

confidence: 99%