SGX Enclave Exploit Analysis and Considerations for Defensive SGX Programming

" summary

Covers security analysis and pen-testing experience on Intel SGX enclaves (using the Intel SGX SDK), describing past enclave exploits the team found, mitigations for those vulnerabilities, and defensive programming practices. Discusses enclave-specific threats including software bugs and side-channel attacks, and surveys defense-in-depth strategies and protections developers can apply to write more secure enclave code.

AI-written summary · about

" related talks

• 48mSGX Secure Enclaves in Practice: Security and Crypto ReviewJean-Philippe Aumasson, Luis Merino · Black Hat USA 2016
• 23mThe Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGXAndrea Biondo · USENIX Security '18
• 54mWhen Good Turns Evil: Using Intel SGX to Stealthily Steal BitcoinsMichael Schwarz, Moritz Lipp · Black Hat Asia 2018
• 25mTelling Your Secrets without Page Faults...Raoul Strackx, Frank Piessens, Jo Van Bulck, Nico Weichbrodt, Rüdiger Kapitza · 26th USENIX Security Symposium (USENIX Security '17)
• 46mState of Intel SGX in LinuxRoman Volosatovs, Jarkko Sakkinen · Linux Security Summit Europe 2022
• 25mForeshadow: Extracting the Keys to the Intel SGX Kingdom...Jo Van Bulck · USENIX Security '18
• 36mAttacking & Defending Kubernetes TEE Enclaves in Critical InfrastructureRobert Ficcaglia · KubeCon + CloudNativeCon Europe 2022
• 33mHacking in Darkness: Return-oriented Programming against Secure EnclavesYeongjin Jang, Taesoo Kim, Jaehyuk Lee, Jinsoo Jang, Nohyun Kwak, Yeseul Choi, Changho Choi, Marcus Peinado, Brent Byunghoon Kang · 26th USENIX Security Symposium (USENIX Security '17)