Brenner S, Wulf C, Goltzsche D, Weichbrodt N, Lorenz M, Fetzer C, Pietzuch P, Kapitza R (2016)
Publication Type: Conference contribution
Publication year: 2016
Publisher: Association for Computing Machinery, Inc
Conference Proceedings Title: Proceedings of the 17th International Middleware Conference, Middleware 2016
Event location: Trento, ITA
ISBN: 9781450343008
Cloud computing, while ubiquitous, still suffers from trust issues, especially for applications managing sensitive data. Third-party coordination services such as ZooKeeper and Consul are fundamental building blocks for cloud applications, but are exposed to potentially sensitive application data. Recently, hardware trust mechanisms such as Intel's Software Guard Extensions (SGX) offer trusted execution environments to shield application data from untrusted software, including the privileged Operating System (OS) and hypervisors. Such hardware support suggests new options for securing third-party coordination services. We describe SecureKeeper, an enhanced version of the ZooKeeper coordination service that uses SGX to preserve the confidentiality and basic integrity of ZooKeeper-managed data. SecureKeeper uses multiple small enclaves to ensure that (i) user-provided data in ZooKeeper is always kept encrypted while not residing inside an enclave, and (ii) essential processing steps that demand plaintext access can still be performed securely. SecureKeeper limits the required changes to the ZooKeeper code base and relies on Java's native code support for accessing enclaves. With an overhead of 11%, the performance of SecureKeeper with SGX is comparable to ZooKeeper with secure communication, while providing much stronger security guarantees with a minimal trusted code base of a few thousand lines of code.
APA:
Brenner, S., Wulf, C., Goltzsche, D., Weichbrodt, N., Lorenz, M., Fetzer, C.,... Kapitza, R. (2016). SecureKeeper: Confidential ZooKeeper using Intel SGX. In Proceedings of the 17th International Middleware Conference, Middleware 2016. Trento, ITA: Association for Computing Machinery, Inc.
MLA:
Brenner, Stefan, et al. "SecureKeeper: Confidential ZooKeeper using Intel SGX." Proceedings of the 17th International Middleware Conference, Middleware 2016, Trento, ITA Association for Computing Machinery, Inc, 2016.
BibTeX: Download