Towards (Really) Safe and Fast Confidential I/O

Hugo Lefeuvre; David Chisnall; Marios Kogias; Pierre Olivier

doi:https://doi.org/10.1145/3593856.3595913

Towards (Really) Safe and Fast Confidential I/O

Hugo Lefeuvre, David Chisnall, Marios Kogias, Pierre Olivier

Advanced Processor Technology

Research output: Contribution to conference › Paper › peer-review

355 Downloads (Pure)

Abstract

Confidential cloud computing enables cloud tenants to distrust their service provider. Achieving confidential computing solutions that provide concrete security guarantees requires not only strong mechanisms, but also carefully designed software interfaces. In this paper, we make the observation that confidential I/O interfaces, caught in the tug-of-war
between performance and security, fail to address both at a time when confronted to interface vulnerabilities and observability by the untrusted host. We discuss the problem of safe I/O interfaces in confidential computing, its implications and challenges, and devise research paths to achieve confidential I/O interfaces that are both safe and fast.

Original language	English
Number of pages	6
DOIs	https://doi.org/10.1145/3593856.3595913
Publication status	Published - 22 Jun 2023
Event	19th Workshop on Hot Topics in Operating Systems - Brown University, Providence, Rhode Island, United States Duration: 22 Jun 2023 → 24 Jun 2023 Conference number: XIX https://sigops.org/s/conferences/hotos/2023/index.html

Conference

Conference	19th Workshop on Hot Topics in Operating Systems
Abbreviated title	HotOS'23
Country/Territory	United States
City	Providence, Rhode Island
Period	22/06/23 → 24/06/23
Internet address	https://sigops.org/s/conferences/hotos/2023/index.html

Access to Document

https://doi.org/10.1145/3593856.3595913Licence: CC BY-SA

Towards (Really) Safe and Fast Confidential I/OFinal published version, 580 KBLicence: CC BY-SA

Cite this

@conference{db3f5f1fa96643acacdab0a6d3c9e669,

title = "Towards (Really) Safe and Fast Confidential I/O",

abstract = "Confidential cloud computing enables cloud tenants to distrust their service provider. Achieving confidential computing solutions that provide concrete security guarantees requires not only strong mechanisms, but also carefully designed software interfaces. In this paper, we make the observation that confidential I/O interfaces, caught in the tug-of-war between performance and security, fail to address both at a time when confronted to interface vulnerabilities and observability by the untrusted host. We discuss the problem of safe I/O interfaces in confidential computing, its implications and challenges, and devise research paths to achieve confidential I/O interfaces that are both safe and fast.",

author = "Hugo Lefeuvre and David Chisnall and Marios Kogias and Pierre Olivier",

year = "2023",

month = jun,

day = "22",

doi = "https://doi.org/10.1145/3593856.3595913",

language = "English",

note = "19th Workshop on Hot Topics in Operating Systems, HotOS'23 ; Conference date: 22-06-2023 Through 24-06-2023",

url = "https://sigops.org/s/conferences/hotos/2023/index.html",

}

TY - CONF

T1 - Towards (Really) Safe and Fast Confidential I/O

AU - Lefeuvre, Hugo

AU - Chisnall, David

AU - Kogias, Marios

AU - Olivier, Pierre

N1 - Conference code: XIX

PY - 2023/6/22

Y1 - 2023/6/22

N2 - Confidential cloud computing enables cloud tenants to distrust their service provider. Achieving confidential computing solutions that provide concrete security guarantees requires not only strong mechanisms, but also carefully designed software interfaces. In this paper, we make the observation that confidential I/O interfaces, caught in the tug-of-war between performance and security, fail to address both at a time when confronted to interface vulnerabilities and observability by the untrusted host. We discuss the problem of safe I/O interfaces in confidential computing, its implications and challenges, and devise research paths to achieve confidential I/O interfaces that are both safe and fast.

AB - Confidential cloud computing enables cloud tenants to distrust their service provider. Achieving confidential computing solutions that provide concrete security guarantees requires not only strong mechanisms, but also carefully designed software interfaces. In this paper, we make the observation that confidential I/O interfaces, caught in the tug-of-war between performance and security, fail to address both at a time when confronted to interface vulnerabilities and observability by the untrusted host. We discuss the problem of safe I/O interfaces in confidential computing, its implications and challenges, and devise research paths to achieve confidential I/O interfaces that are both safe and fast.

U2 - https://doi.org/10.1145/3593856.3595913

DO - https://doi.org/10.1145/3593856.3595913

M3 - Paper

T2 - 19th Workshop on Hot Topics in Operating Systems

Y2 - 22 June 2023 through 24 June 2023

ER -

Towards (Really) Safe and Fast Confidential I/O

Abstract

Conference

Access to Document

Fingerprint

Cite this