Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Intel SGX is the latest processor architecture promising secure code execution despite large, complex and hence potentially vulnerable legacy operating systems (OSs). Hover, two recent works identified vulnerabilities that allow an untrusted management OS to extract secret information from Intel SGX's enclaves, and to violate their integrity by exploiting concurrency bugs. In this work,  re-investigate delayed preemption (DP) in the context of Intel SGX. DP is a mechanism originally proposed for L4-family microkernels as disable-interrupt replacement. Recapitulating earlier results on language-based information-flow security,  illustrate the construction of leakage-free code for enclaves. Hover, as long as adversaries have fine-grained control over preemption timing, these solutions are impractical from a performance/complexity perspective. To overcome this,  resort to delayed preemption, and sketch a software implementation for hypervisors providing enclaves as ll as a hardware extension for systems like SGX. Finally,  illustrate how static analyses for SGX may be extended to check confidentiality of preemption-delaying programs.
['Marcus Völp', 'Adam Lackorzynski', 'Jeremie Decouchant', 'Vincent Rahli', 'Francisco Rocha', 'Paulo Esteves-Verissimo']
I am writing a research paper on a idea Avoiding Leakage and Synchronization Attacks through Enclave-Side Preemption Control
[{"from": "human", "value": "I am writing a research paper on a idea Avoiding Leakage and Synchronization Attacks through Enclave-Side Preemption Control"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Intel SGX is the latest processor architecture promising secure code execution despite large, complex and hence potentially vulnerable legacy operating systems (OSs). Hover, two recent works identified vulnerabilities that allow an untrusted management OS to extract secret information from Intel SGX's enclaves, and to violate their integrity by exploiting concurrency bugs. In this work,  re-investigate delayed preemption (DP) in the context of Intel SGX. DP is a mechanism originally proposed for L4-family microkernels as disable-interrupt replacement. Recapitulating earlier results on language-based information-flow security,  illustrate the construction of leakage-free code for enclaves. Hover, as long as adversaries have fine-grained control over preemption timing, these solutions are impractical from a performance/complexity perspective. To overcome this,  resort to delayed preemption, and sketch a software implementation for hypervisors providing enclaves as ll as a hardware extension for systems like SGX. Finally,  illustrate how static analyses for SGX may be extended to check confidentiality of preemption-delaying programs."}]