HyperEnclave: Enhancing the I/O Security of SGX : Building Trusted I/O for SGX with VFIO

Sammanfattning

This thesis addresses the security challenges of Intel Software Guard Extensions (SGX) in managing Input-Output (I/O) operations, which are vulnerable to attacks when data leaves the secure enclave. This issue is critical in environments where data integrity and confidentiality are paramount. To tackle this, the thesis proposes a trusted I/O framework that integrates SGX with Virtual Function Input-Output (VFIO) technology. By leveraging VFIO, the framework ensures secure and efficient I/O operations, reducing the risks of data leakage and unauthorized access. The results demonstrate that the proposed solution effectively protects I/O operations while contributing to the advancement of secure computing in virtualized environments and explores the possibility of combining VFIO with other Trusted Execution Environments (TEE) designs.