NestedSGX: Bootstrapping Trust to Enclaves within Confidential VMs

arXiv:2402.11438v1 Announce Type: new
Abstract: Integrity is critical for maintaining system security, as it ensures that only genuine software is loaded onto a machine. Although confidential virtual machines (CVMs) function within isolated environments separate from the host, it is important to recognize that users still encounter challenges in maintaining control over the integrity of the code running within the trusted execution environments (TEEs). The presence of a sophisticated operating system (OS) raises the possibility of dynamically creating and executing any …

arxiv challenges confidential control critical cs.ar cs.cr environments function host important integrity machine machines security software system trust virtual virtual machines vms