WASM + Confidential Computing, Secure Your FaaS Function
summary
Reference architecture and reference implementation wire Knative to a WASM runtime running inside Intel SGX enclaves, with an encrypted WASM modules workflow, a secure store in SGX for user keys, and an Intel SGX + HTTPA attestation step before provisioning keys to new function instances. The talk shows component diagrams, the Kubernetes device plugin, an HTT P style extension for end to end encryption and remote attestation, and an end to end deployment and invocation flow but provides no performance or scalability numbers.
AI-written summary · about
chapters (9)
- 0:00Start
- 6:57Intel SGX and Intel Amber
- 9:56Overview
- 12:19Use Cases
- 15:22What need to be attested?
- 17:36Serverless Security Chanllenges
- 20:27Serverless Scenario Unique Challenges
- 21:33Secure Store
- 22:40Secure Function Solution
related talks
08mLightning Talk: Build trusted cloud apps with Wasm: WebAssembly Micro Runtime is ready
36mBringing honest computing to the WASM world
28mWasm + Kubernetes: Beyond Containers
30mProtecting Wasm Workloads with Confidential Computing and TEE...
30mA WASM Runtime for FaaS Protected by TEE
22mCreate an Extensible Cloud Native Application with WebAssembly
10mSponsored Keynote: What can WebAssembly do for your Application Security and Extens...
38mEnarx for Confidential Computing