Beyond Memory Encryption: Accelerate Confidential Computing Lan... W. Zhang, K. Lu, R. Hao & X. Dong скачать в хорошем качестве

Beyond Memory Encryption: Accelerate Confidential Computing Lan... W. Zhang, K. Lu, R. Hao & X. Dong

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io Beyond Memory Encryption: Accelerate Confidential Computing Landing for Cloud Native - Wenhui Zhang, Bytedance; Ken Lu, Ruomeng Hao & Xiaocheng Dong, Intel Confidential computing (CC) provides data-in-use protection for workloads running in hardware-based TEE environments through memory encryption technology. It has been supported by hardware vendors such as Intel, AMD, ARM, etc. But its adoption is slow, especially for the cloud-native paradigm. We observed key issues: CC cloud infrastructure is diverse, such as confidential clusters, VMs, containers (Redhat). It requires the integration of E2E stack with several components. Remote attestation is a prerequisite for obtaining secrets from relying parties. The challenge is how to collect platform status (aka evidence/measurements) across different cloud infrastructures. We will dive into the challenges, share the solutions for different CC infrastructures, and use AIGC workloads as an example to analyze TCB measurements based on threat modeling. Finally, we will introduce open source projects CC Trusted API and CCNP (Confidential Cloud Native Primitives) to address the challenges.