Trusted execution environments for integrity in virtualized cloud environments

• Grant number: 21/11321-9
• Support Opportunities: Scholarships in Brazil - Scientific Initiation
• Start date: October 01, 2021
• End date: September 30, 2022
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Agreement: MCTI/MC
• Principal Investigator: Miguel Elias Mitre Campista
• Grantee: Guilherme Araujo Thomaz
• Host Institution: Instituto Alberto Luiz Coimbra de Pós-Graduação e Pesquisa (COPPE). Universidade Federal do Rio de Janeiro (UFRJ)
• Associated research grant: 15/24485-9 - Future internet for smart cities, AP.TEM

Abstract

Cloud computing provides a shared infrastructure where users employ virtual machines to process data efficiently and at a low cost. Some information such as medical records, geolocation sensor measurements, and virtual network functions settings are sensitive and need to be protected in data processing and virtual machine migration. This project uses trusted execution environments to protect sensitive data from virtual machines instantiated and migrated in the cloud. The research proposes the use of Intel's Software Guard Extensions (SGX) technology to store sensitive data in isolated regions of memory and to ensure integrity in the migration of data from virtual machines. Unlike conventionally used technologies, this system reduces the attack perimeter, protecting applications even if agents with a high level of privilege such as the network administrator and the Operating System are compromised. (AU)