Skip to Main content Skip to Navigation
Conference papers

Secure Cloud Micro Services Using Intel SGX

Abstract : The micro service paradigm targets the implementation of large and scalable systems while enabling fine-grained service-level maintainability. Due to their scalability, such architectures are frequently used in cloud environments, which are often subject to privacy and trust issues hindering the deployment of services dealing with sensitive data.In this paper we investigate the integration of trusted execution based on Intel Software Guard Extensions (SGX) into micro service applications. We present our Vert.x Vault, that supports SGX-based trusted execution in Eclipse Vert.x, a renowned tool-kit for writing reactive micro service applications. With our approach, secure micro services can run alongside regular ones, inter-connected via the Vert.x event bus to build large Vert.x applications that can contain multiple trusted components.Maintaining a full-fledged Java Virtual Machine (JVM) inside an SGX enclave is impractical due to its complexity, less secure because of a large Trusted Code Base (TCB), and would suffer from performance penalties due to a high memory footprint. However, as Vert.x is written in Java, for a lean TCB this requires integration of native enclave C/C++ code into Vert.x, for which we propose the usage of Java Native Interface (JNI).Our Vert.x Vault provides the benefits of micro service architectures together with trusted execution to support privacy and data confidentiality for sensitive applications in the cloud at scale. In our evaluation we show the feasibility of our approach, buying a significantly increased level of security for a low performance overhead of only $${\approx }8.7\%$$.
Complete list of metadata

Cited literature [12 references]  Display  Hide  Download

https://hal.inria.fr/hal-01800126
Contributor : Hal Ifip <>
Submitted on : Friday, May 25, 2018 - 3:17:42 PM
Last modification on : Friday, May 25, 2018 - 3:50:02 PM
Long-term archiving on: : Sunday, August 26, 2018 - 1:55:44 PM

File

450046_1_En_13_Chapter.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Stefan Brenner, Tobias Hundt, Giovanni Mazzeo, Rüdiger Kapitza. Secure Cloud Micro Services Using Intel SGX. 17th IFIP International Conference on Distributed Applications and Interoperable Systems (DAIS), Jun 2017, Neuchâtel, Switzerland. pp.177-191, ⟨10.1007/978-3-319-59665-5_13⟩. ⟨hal-01800126⟩

Share

Metrics

Record views

638

Files downloads

169