Confidential Execution of Cloud Services

In this paper, the authors present Confidential Domain of Execution (CDE), a mechanism for achieving confidential execution of software in an otherwise untrusted environment, e.g., at a Cloud Service Provider (CSP). This is achieved by using an isolated execution environment in which any communication with the outside untrusted world is forcibly encrypted by trusted hardware. The mechanism can be useful to overcome the challenging issues in guaranteeing confidential execution in virtualized infrastructures, including cloud computing and virtualized network functions, among other scenarios.

Provided by: Alcatel-Lucent Topic: Cloud Date Added: Feb 2014 Format: PDF

Find By Topic