ENCLYZER: Automated Analysis of Transient Data Leaks on Intel SGX

Jiuqin Zhou1; Yuan Xiao2; Radu Teodorescu3; Yinqian Zhang1

10.1109/SEED55351.2022.00020

2022

IEEE International Symposium on Secure and Private Execution Environment Design (SEED)

978-1-6654-8527-2

2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED)

145-156

26-27 Sept. 2022

Storrs, CT, USA

10662 LOS VAQUEROS CIRCLE, PO BOX 3014, LOS ALAMITOS, CA 90720-1264 USA

IEEE COMPUTER SOC

Trusted Execution Environment (TEE) is the cornerstone of confidential computing. Among other TEEs, Intel (R) Secure Guard Extensions (Intel (R) SGX) is the most prominent solution that is frequently used in the public cloud to provide confidential computing services. Intel (R) SGX promotes runtime confidentiality and integrity of enclaves with minimal modifications to existing CPU microarchitectures. However, Transient Execution Attacks, such as L1 Terminal Fault (L1TF), Microarchitectural Data Sampling (MDS), and Transactional Asynchronous Abort (TAA) have exposed certain vulnerabilities within Intel (R) SGX solution. Over the past few years, Intel has developed various countermeasures against most of these vulnerabilities via microcode updates and hardware fixes. However, arguably, there are no existing tools nor studies that can measurably verify the effectiveness of these countermeasures. In this paper, we introduce an automated analysis tool, called ENCLYZER, to evaluate Transient Execution Vulnerabilities on Intel (R) SGX. We leverage ENCLYZER to comprehensively analyze a set of processors, with multiple versions of their microcode, to verify the correctness of these countermeasures. Our empirical analysis suggests that most countermeasures are effective in preventing attacks that are initiated from the same CPU hyperthread, but less effective for cross-thread attacks. Therefore, the application of the latest microcode patches and disabling hyperthreading is warranted to enhance the security of Intel (R) SGX-enabled systems. Security Configurations like hyperthreading disabled/enabled are attestable on Intel (R) SGX platform to provide user with increased confidence in making decision on system trustworthiness. Note that the Security Configurations cannot be modified without a system reboot.

Cloud computing Microarchitecture Runtime Program processors Software Hardware Security

第一

英语

CPCI-S

Computer Science ; Engineering

Computer Science, Hardware & Architecture ; Computer Science, Information Systems ; Computer Science, Theory & Methods ; Engineering, Electrical & Electronic

WOS:000889465400013

IEEE

1.Southern University of Science and Technology
2.Intel Labs
3.The Ohio State University

Jiuqin Zhou,Yuan Xiao,Radu Teodorescu,et al. ENCLYZER: Automated Analysis of Transient Data Leaks on Intel SGX[C]. 10662 LOS VAQUEROS CIRCLE, PO BOX 3014, LOS ALAMITOS, CA 90720-1264 USA:IEEE COMPUTER SOC,2022:145-156.