Erlang SGX - Protecting Confidential Erlang Workloads with Intel SGX

Examensarbete för masterexamen

Please use this identifier to cite or link to this item: https://hdl.handle.net/20.500.12380/302200
Download file(s):
File Description SizeFormat 
CSE 20-57 Hemdal Roxbergh.pdf1.48 MBAdobe PDFThumbnail
View/Open
Full metadata record
DC FieldValueLanguage
dc.contributor.authorHemdal, Emil-
dc.contributor.authorRoxbergh, Eliot-
dc.contributor.departmentChalmers tekniska högskola / Institutionen för data och informationstekniksv
dc.date.accessioned2021-02-11T12:43:00Z-
dc.date.available2021-02-11T12:43:00Z-
dc.date.issued2020sv
dc.date.submitted2020-
dc.identifier.urihttps://hdl.handle.net/20.500.12380/302200-
dc.description.abstractSecure enclaves, such as Intel sgx, provide a trusted execution environment which offers integrity and confidentiality guarantees to supported applications. In this thesis, we show how Erlang can be protected to harden telecommunication workloads by utilizing hardware-based Intel sgx. First, we demonstrate how an untrusted Erlang runtime can execute trusted c code inside of sgx via Erlang C Nodes and nifs. A possible use case is the protection of cryptographic functionality which is demonstrated with OpenSSL inside of sgx, callable from Erlang. Second, to protect the Erlang runtime itself, a number of alternatives are explored as to enable execution of Erlang code inside of the enclave. However, Erlang ships with beam, an advanced virtual machine, which performs frequent syscalls and io activity that drastically increases the complexity of porting it to sgx enclaves. Therefore, two prominent third-party frameworks are tested which aim to support generic applications inside of sgx: the Library os Graphene and the shim-layer solution scone. Third, alternatives to implement a custom solution are discussed which could yield performance and security benefits over the generic frameworks while protecting an Erlang runtime. The complete source code for this thesis is available under a permissive bsd 3 license.sv
dc.language.isoengsv
dc.setspec.uppsokTechnology-
dc.subjectErlangsv
dc.subjectbeamsv
dc.subjectIntel-sgxsv
dc.subjectGraphenesv
dc.subjectsconesv
dc.subjectsecure-enclavesv
dc.subjecttrusted-computingsv
dc.titleErlang SGX - Protecting Confidential Erlang Workloads with Intel SGXsv
dc.type.degreeExamensarbete för masterexamensv
dc.type.uppsokH-
dc.contributor.examinerRusso, Alejandro-
dc.contributor.supervisorSands, David-
dc.identifier.coursecodeDATX05sv
Collection:Examensarbeten för masterexamen // Master Theses



Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.