.png){kind=icon}
返回
SvTPM: SGX-Based Virtual Trusted Platform Modules for Cloud Computing
.png){kind=icon}
PRE
AI
DOI：10.1109/TCC.2023.3243891.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Virtual Trusted Platform Modules (vTPMs) are widely used in commercial cloud platforms (e.g., VMware Cloud, GoogleCloud, andMicrosoft Azure) to provide virtual root-of-trust and security services for virtual machines. Unfortunately, current state-of-the-art vTPM implementations for cloud computing cannot provide strong protection for vTPMs at run-time and suffer from poor performance under binding vTPMs to a physical TPM. In this paper, we propose SvTPM, an SGX-based virtual trusted platform module, which provides complete life cycle protection of vTPMs in the cloud and does not rely on the physical TPM. SvTPM provides strong isolation protection so malicious cloud tenants or even cloud administrators cannot access vTPM's private keys or any other sensitive data. In this paper, we implement a prototype of SvTPM, which identifies and solves a couple of critical security challenges for vTPM protection with SGX, such as NVRAM rollback attacks, NVRAM binding attacks, and vTPM rollback attacks. SvTPM also shows how to establish trust between vTPM and SGX Platform. Our performance evaluation shows that the NVRAM launch time of SvTPM is 1700x faster than vTPM built upon hardware TPM. In TPM standard command evaluation, we find that SvTPM incurs negligible performance overhead while providing strong isolation and protection. To our knowledge, SvTPM is the first practical work to solve the critical security challenges of securing vTPM using SGX.
Keyword:
NVRAM rollback protection
software guard extensions
trust chain establishment
virtual trusted platform modules
期刊
I
IF:
5
论文数:
1.9K
被引数:
4.3K
机构
引用论文
Use of supramolecular cavities maintained by hydrogen-bonded network in molecular crystals as a novel binding site for guests in water. The solid-state host-guest complexation of a bistesorcinol derivative of anthracene.png)
Tetrahedron
TetrahedronIF0
PREAI
分享收藏Z-boson production via the weak process e+e−→μ+μ− in the presence of a circularly polarized laser field通过弱过程 e+e−→μ+μ− 在圆偏振激光场存在下的Z-玻色子产生
OAAI
OAAI分享收藏Energy-Efficient Delay-Aware Task Offloading in Fog-Cloud Computing System for IoT Sensor Applications面向物联网传感器应用的雾云计算系统中的高能效延迟感知任务卸载
PREAI
分享收藏
查看更多内容