Affiliation:
1. The University of Texas at Austin, Austin, TX
2. Google, CA, United States
Abstract
Users of modern data-processing services such as tax preparation or genomic screening are forced to trust them with data that the users wish to keep secret. Ryoan
1
protects secret data while it is processed by services that the data owner does not trust. Accomplishing this goal in a distributed setting is difficult, because the user has no control over the service providers or the computational platform. Confining code to prevent it from leaking secrets is notoriously difficult, but Ryoan benefits from new hardware and a request-oriented data model.
Ryoan provides a distributed sandbox, leveraging hardware enclaves (e.g., Intel’s software guard extensions (SGX) [40]) to protect sandbox instances from potentially malicious computing platforms. The protected sandbox instances confine untrusted data-processing modules to prevent leakage of the user’s input data. Ryoan is designed for a request-oriented data model, where confined modules only process input once and do not persist state about the input. We present the design and prototype implementation of Ryoan and evaluate it on a series of challenging problems including email filtering, health analysis, image processing and machine translation.
Funder
National Science Foundation
Publisher
Association for Computing Machinery (ACM)
Cited by
57 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. A comprehensive survey and taxonomy on privacy-preserving deep learning;Neurocomputing;2024-02
2. Accelerating Extra Dimensional Page Walks for Confidential Computing;56th Annual IEEE/ACM International Symposium on Microarchitecture;2023-10-28
3. SAPPX: Securing COTS Binaries with Automatic Program Partitioning for Intel SGX;2023 IEEE 34th International Symposium on Software Reliability Engineering (ISSRE);2023-10-09
4. SoK: A Systematic Review of TEE Usage for Developing Trusted Applications;Proceedings of the 18th International Conference on Availability, Reliability and Security;2023-08-29
5. A Trust Usage Control Approach for Media Player Based on Intel SGX;2023 8th International Conference on Data Science in Cyberspace (DSC);2023-08-18