Lightning Talk: Computing Confidentially in the Clouds
summary
Confidential computing aims to protect data in use by running code inside trusted execution environments; the Confidential Computing Consortium defines TEEs and distinguishes process-based TEEs (Intel SGX, ARM TrustZone) from VM-based isolation (AMD SEV style). Intel ships an SGX device driver for Kubernetes and Azure runs production Kubernetes clusters with SGX enabled; TPMs and HSMs remain complementary. Proposals surface for hardware-verified launch control, cryptographic policy enforcement (Notary), and GDPR-strengthening audits such as the Cambridge position paper.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:38Cloud is just someone elses computer
- 1:48Isolation models
- 3:00Confidential Computing Consortium
- 3:23What is Confidential Computing
- 3:36Key Properties
- 3:51Process Isolation
- 4:54TPMs HSMs
- 5:40Kubernetes
- 6:15Legal Terms
- 8:10What if
- 9:15Implications
- 9:56Outro
related talks
16mIntroduction to confidential computing
37mIt's All About Trust: Why Confidential Computing Matters- 37mIt's All About Trust: Why Confidential Computing Matters
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
45mConfidential Computing: Protecting Customer Data in the Cloud
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
47mThe Rise of Confidential Computing, What It Is and What it Means to You- 42mSponsored Session: Confidential Computing - New Capabilities for New Workloads