Titel: Intel® Software Guard Extensions: Next Generation Isolated Execution


Abstract:

For  years  the  PC  community  has  struggled  to  provide  secure
solutions on open platforms. Intel has developed Intel® Software Guard
Extensions (Intel® SGX)  technology to enable SW developers to develop
and deploy secure  applications  on  platforms ranging from mobile
devices to  servers.   It does this by providing ISA extensions for
generating  hardware  enforceable  containers  called enclaves. Enclaves
execute within the context of process of the native operating
environment. Their memory is protected from access by all privileged
software. In addition to providing memory protections, Intel SGX enables
enclaves  to attest its identity to remote parties and seal secrets to
its identity. I will discuss Intel SGX and the application of the
technology to develop secure applications.