OC3 2023
| title | author | length |
|---|---|---|
| Introduction to confidential computing | Felix Schuster | 16m |
Defines confidential computing as CPU-made enclaves with strong isolation, runtime encryption and remote attestation and cites SGX (2015) as the origin… | ||
| Confidential computing: from niche to mainstream | Greg Lavender | 23m |
Industry progress moves confidential computing from lab to deployable tech with concrete pieces: Intel TDX (VM isolation now in clouds), TDX connect (trusted… | ||
| Confidential Computing Consortium - accelerating the privacy of computing | Ben Fischer | 05m |
The Confidential Computing Consortium explains its mission to secure data in use via hardware attested trusted execution environments and lists seven projects… | ||
| CTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA | Greg Lavender, Mark Russinovich, Mark Papermaster, Ian Buck, Felix Schuster | 36m |
Panelists explain that confidential computing means hardware-rooted trusted execution environments with measurement and attestation, now shipping as… | ||
| Attesting NVIDIA GPUs in a confidential computing environment | Mark Overby | 25m |
Hopper GPUs include a hardware GPU Security Enclave that measures firmware, driver microcode, PCIe firewalls and MIG isolation, signs evidence with an x509… | ||
| Removing our Hyper-V host OS from the TCB | Carolina Perez-Vargas, Jin Lin | 25m |
Azure confidential VMs remove the Hyper‑V host OS and hypervisor from the TCB by moving emulated devices and attestation into the VM via a guest paravizer… | ||
| Opening the I/O gates with confidential containers | Samuel Ortiz, Jiewen Yao | 16m |
Describes a TEE‑I/O framework that authenticates and encrypts PCIe devices so they can be directly assigned into confidential VMs and Kubernetes pods. It uses… | ||
| Making PCI devices ready for confidential computing | Jiewen Yao, Samuel Ortiz | 13m |
Clear checklist of what device firmware must implement to attach devices to TEEs: hardware IDE link encryption via PCIe DOE, attestation and certificate… | ||
| Lessons learned: scaling confidential clusters on OpenStack | Samuel Kunkel, Moritz Eckert | 17m |
Open-source confidential cloud built on AMD SEV 7713p with Ubuntu 24.04 kernel 6.6, libvirt 8, QEMU 6.2 and OpenStack Yoga; uses OVMF UEFI, svtpm, Barbican… | ||
| Lessons learned from production confidential computing customer deployments | Bobbie Chen | 18m |
Bank migration case shows MongoDB data encrypted with AWS KMS keys and processed only inside Nitro Enclaves, using attestation so only ODS nodes with the right… | ||
| Storage subsystem for hardware TEE based confidential containers | Jiang Liu | 16m |
OC3 is the world’s premier event for confidential computing, where cloud security experts come together to showcase the latest developments and use… | ||
| Towards the medicine of the future with confidential computing | Florent Dufour | 17m |
DigiMed Bayern builds an academic confidential cloud at LRZ to let 14 institutions and >100 researchers share multi‑omic heart data with €25M funding; the… | ||
| Intel Trust Domain Extensions | Simon Johnson | 31m |
Intel TDX adds a TDX module running in SEAM mode that builds hardware-isolated VMs called trust domains (TVs) using secure page tables and multi-key memory… | ||
| MobileCoin Fog: a cloud you can't see through | Chris Beck | 25m |
MobileCoin Fog is a deployed system that uses Intel SGX enclaves plus an Oblivious RAM backend to let mobile wallets download only their own transactions… | ||
| Always-encrypted, confidential Kubernetes with Constellation | Malte Poll, Moritz Eckert | 23m |
Constellation is an open-source Kubernetes distribution that wraps entire clusters in runtime-encrypted clusters using Confidential VMs (currently AMD SEV… | ||
| "Peer Pods": a confidential computing approach | James Magowan, Steven Horsman | 14m |
Claims that Confidential Containers plus cloud IaaS APIs can deliver Peer Pods as independent TEE-backed VMs so Kubernetes avoids expensive bare metal… | ||
| Virtual TPM based attestation for Intel Trust Domain Extensions | Jiewen Yao | 26m |
Introduces a working vTPM design for Intel TDX that adds a vtpm TD plus changes in KVM/QEMU, OVMF (TDVF) and a guest Linux TPM driver, uses shared buffers and… | ||
| Trusted in-guest hypervisor services with secure VM service module | Jörg Rödel | 11m |
A prototype Secure VM Service Module runs inside the guest TEE using VMPLs to move hypervisor functionality into the confidential guest context. It implements… | ||
| Enabling secure multi-party collaboration with confidential computing | Keith Moyer | 11m |
Google describes an open source system called Confidential Spaces built on confidential VMs that claims to release secrets only to authorized workloads and to… | ||
| Recognizing obstacles on the path to broad adoption of confidential computing | Mark Novak | 18m |
Claims that broad adoption hinges first on closing a regulatory vacuum with a multi-year timeline — estimated five to seven years — followed by solving… | ||
| Path towards the vision of confidential clouds | Raghu Yeluri | 16m |
Claim: within 7–10 years all clouds become confidential clouds with 70–75%+ of cloud apps running in TEEs. Path requires about eight technical and operational… | ||
| Hardware backed attestation in TLS | Ionut Mihalcea | 24m |
Integrates hardware-backed remote attestation as a native authentication mechanism inside TLS 1.3, carrying attestation credentials in the certificate and… | ||
| Faster AI model training with confidential computing | Vikas Bhatia, Mary Beth Chalk | 14m |
A deployed platform called Escrow AI uses the Azure Confidential Computing stack to run sightless computation on protected health information so data stays in… | ||
| Lessons from years of building privacy-preserving technologies | Chester Leung | 12m |
After thousands of hours collaborating with researchers, regulators and practitioners, the conclusion is that TEEs plus cryptographic hardening hit the best… | ||
| Customer managed TCB with CVMs on Azure | Swamy Nagaraju, Chris Orsini | 29m |
Azure offers a private‑preview Customizable/Custom Firmware CVM deployment that hands customers control of the guest TCB by letting them supply an open‑source… | ||
| Container code with confidential containers on Azure | A. Gowda, P. Khandavilli | 23m |
Demonstrates measuring and attesting the entire TCB including container images and runtime config by extending the AMD SNP VM report with a second-layer host… | ||
| Demystifying remote attestation | Andras Slemmer, Gaëtan Wattiau | 25m |
Remote attestation is evaluated by concrete properties: comprehensiveness and interpretability of evidence, hardware-signed measurements, timeliness and a… | ||
| Making remote attestation meaningful for external reviews | Conrad Grobler | 22m |
Project Oak demonstrates a concrete pipeline so end users can verify exactly which code runs in a TEE: it uses AMD SEV‑SNP measurements taken before boot, a… | ||
| Project Amber - Intel's attestation service | Nikhil Deshpande, Raghu Yeluri | 31m |
Project Amber is Intel’s SaaS attestation authority that verifies workload trustworthiness across clouds, initially supporting SGX and TDX, running attestation… | ||
| nothing matches | ||