SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing

Roberto Guanciale; Nicolae Paladi; Arash Vahidi

doi:10.1109/SEED55351.2022.00017

SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing

Roberto Guanciale, Nicolae Paladi, Arash Vahidi

Research output: Chapter in Book/Report/Conference proceeding › Paper in conference proceeding › peer-review

1352 Downloads (Pure)

Abstract

Confidential computing allows processing sensitive workloads in securely isolated spaces. Following earlier adop- tion of process-based approaches to isolation, vendors are now enabling hardware and firmware support for virtualization-based confidential computing on several server platforms. Due to variations in the technology stack, threat model, implemen-tation and functionality, the available solutions offer somewhat different capabilities, trade-offs and security guarantees. In this paper we review, compare and contextualize four virtualization-based confidential computing technologies for enterprise server platforms - AMD SEV, ARM CCA, IBM PEF and Intel TDX.

Original language	English
Title of host publication	Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22)
Publisher	IEEE - Institute of Electrical and Electronics Engineers Inc.
Pages	109-120
ISBN (Electronic)	978-1-6654-8526-5
ISBN (Print)	978-1-6654-8527-2
DOIs	https://doi.org/10.1109/SEED55351.2022.00017
Publication status	Published - 2022 Nov 4
Event	2022 IEEE International Symposium on Secure and Private Execution Environment Design - Virtual Duration: 2022 Sept 26 → 2022 Sept 27 https://seed22.engr.uconn.edu/

Conference

Conference	2022 IEEE International Symposium on Secure and Private Execution Environment Design
Abbreviated title	SEED 22
Period	2022/09/26 → 2022/09/27
Internet address	https://seed22.engr.uconn.edu/

Subject classification (UKÄ)

Computer Systems

Free keywords

Confidential Computing

Access to Document

10.1109/SEED55351.2022.00017

SoK-confidential-quartet

Cite this

Guanciale, R., Paladi, N., & Vahidi, A. (2022). SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing. In Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22) (pp. 109-120). IEEE - Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/SEED55351.2022.00017

@inproceedings{9c2c919bea574e06948055f137327c24,

title = "SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing",

abstract = "Confidential computing allows processing sensitive workloads in securely isolated spaces. Following earlier adop- tion of process-based approaches to isolation, vendors are now enabling hardware and firmware support for virtualization-based confidential computing on several server platforms. Due to variations in the technology stack, threat model, implemen-tation and functionality, the available solutions offer somewhat different capabilities, trade-offs and security guarantees. In this paper we review, compare and contextualize four virtualization-based confidential computing technologies for enterprise server platforms - AMD SEV, ARM CCA, IBM PEF and Intel TDX.",

keywords = "Confidential Computing",

author = "Roberto Guanciale and Nicolae Paladi and Arash Vahidi",

year = "2022",

month = nov,

day = "4",

doi = "10.1109/SEED55351.2022.00017",

language = "English",

isbn = "978-1-6654-8527-2",

pages = "109--120",

booktitle = "Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22)",

publisher = "IEEE - Institute of Electrical and Electronics Engineers Inc.",

address = "United States",

note = "2022 IEEE International Symposium on Secure and Private Execution Environment Design, SEED 22 ; Conference date: 26-09-2022 Through 27-09-2022",

url = "https://seed22.engr.uconn.edu/",

}

Guanciale, R, Paladi, N & Vahidi, A 2022, SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing. in Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22). IEEE - Institute of Electrical and Electronics Engineers Inc., pp. 109-120, 2022 IEEE International Symposium on Secure and Private Execution Environment Design, 2022/09/26. https://doi.org/10.1109/SEED55351.2022.00017

SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing. / Guanciale, Roberto; Paladi, Nicolae; Vahidi, Arash.
Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22). IEEE - Institute of Electrical and Electronics Engineers Inc., 2022. p. 109-120.

Research output: Chapter in Book/Report/Conference proceeding › Paper in conference proceeding › peer-review

TY - GEN

T1 - SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing

AU - Guanciale, Roberto

AU - Paladi, Nicolae

AU - Vahidi, Arash

PY - 2022/11/4

Y1 - 2022/11/4

N2 - Confidential computing allows processing sensitive workloads in securely isolated spaces. Following earlier adop- tion of process-based approaches to isolation, vendors are now enabling hardware and firmware support for virtualization-based confidential computing on several server platforms. Due to variations in the technology stack, threat model, implemen-tation and functionality, the available solutions offer somewhat different capabilities, trade-offs and security guarantees. In this paper we review, compare and contextualize four virtualization-based confidential computing technologies for enterprise server platforms - AMD SEV, ARM CCA, IBM PEF and Intel TDX.

AB - Confidential computing allows processing sensitive workloads in securely isolated spaces. Following earlier adop- tion of process-based approaches to isolation, vendors are now enabling hardware and firmware support for virtualization-based confidential computing on several server platforms. Due to variations in the technology stack, threat model, implemen-tation and functionality, the available solutions offer somewhat different capabilities, trade-offs and security guarantees. In this paper we review, compare and contextualize four virtualization-based confidential computing technologies for enterprise server platforms - AMD SEV, ARM CCA, IBM PEF and Intel TDX.

KW - Confidential Computing

UR - https://www.scopus.com/pages/publications/85143079315

U2 - 10.1109/SEED55351.2022.00017

DO - 10.1109/SEED55351.2022.00017

M3 - Paper in conference proceeding

SN - 978-1-6654-8527-2

SP - 109

EP - 120

BT - Proceedings of the 2022 IEEE International Symposium on Secure and Private Execution Environment Design (SEED'22)

PB - IEEE - Institute of Electrical and Electronics Engineers Inc.

T2 - 2022 IEEE International Symposium on Secure and Private Execution Environment Design

Y2 - 26 September 2022 through 27 September 2022

ER -

SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing

Abstract

Conference

Subject classification (UKÄ)

Free keywords

Access to Document

Other files and links

Fingerprint

SMARTY: Säkra mjukvaruuppdateringar för den smarta staden

Cite this

SoK: Confidential Quartet - Comparison of Platforms for Virtualization-Based Confidential Computing

Abstract

Conference

Subject classification (UKÄ)

Free keywords

Access to Document

Other files and links

Fingerprint

Projects

SMARTY: Säkra mjukvaruuppdateringar för den smarta staden

Cite this