Toward Migration of SGXEnabled Containers Containers are becoming the de facto platform for cloud computing. While cloud security has been a major concern, Intel SGX provisions powerful protection guarantees that can be used for containers. However, this technology does not come for free. For example, limited Enclave Page Cache (EPC) challenges the migration design of SGXenabled containers.We note that previous security protocols are problematic concerning migration of SGXenabled containers, which will lead to the failure of measures to prevent forkfallback attacks. In this paper, we propose the migration of SGXenabled containers and explore the challenges of deploying and migrating SGXenabled containers considering both EPC resources and persistent storage. To our best knowledge, we are the first to design and implement such a framework for the SGXenabled container migration that is easy, flexible and lightweight to deploy. We evaluate the proposed framework by migrating SGXenabled Sqlite3 container and the experimental result shows that the proposed framework has about 15% overhead, which is acceptable due to its security advantage.

Squad: A Secure, Simple Storage Service for SGXBased Microservices Intel SGX has been the subject of numerous research and development projects. Moreover, this technology has been considered a robust option to secure the data being processed in cloud environments. Despite this, configuring SGXbased applications in complex and dynamic scenarios such as microservice architectures is still a challenge. The process of configuring such applications must guarantee the trustworthiness of the services, and must be simple and efficient. We then propose a solution for configuring and provisioning secrets to SGXbased applications made with help from the Intel SGX SDK. We present a simple solution that can be easily validated and hardened. Also, the solution is pluggable and can be extended to fit specific requirements or leverage other tools (e.g., for data persistence). In addition to describing our proposal, we also provide an evaluation that shows low overhead to the initialization and configuration time of SGX microservices deployed on Kubernetes. This work contributes to the stateoftheart of the usage of trusted execution environments in cloud computing.