Process-based abstractions for VM-based environments
summary
Examines how VM-level enclave platforms (AMD SEV, Intel TDX, AWS Nitro Enclaves) change possibilities for multi-process features like mmap and fork, and asks how to provide a minimal-TCB process-style abstraction on those platforms instead of running full Linux VM images. Discusses constraints of VM-based enclaves and explores design options for building a smaller trusted computing base that offers single-process-like semantics for legacy software.
AI-written summary · about
related talks
21mEmbedded solution for multiprocess application
19mRethinking Isolation Mechanisms for Datacenter Multitenancy
36mEverybody is talking about Confidential Computing - the minimum Devs should know
20mHyperEnclave: An Open and Cross-platform Trusted Execution Environment
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
22mSupporting TEE on x86 Client Platforms with pKVM
19mSupporting Trusted Virtual Machines with Hardware-based Secure Remote Memory
28mOblivious Multi-Party Machine Learning on Trusted Processors