In this lecture, we discuss how we can use SGX to secure distributed systems such as MapReduce (as in the VC3 system): the cloud performs the MapReduce computations without seeing the data or being able to tamper with the computation. Then, we will discuss various types of leakage in SGX and approaches (such as ORAM and GhostRider) to address these issues.

Reading list:

VC3: Trustworthy data analystics in the cloud, Schuster et al

Controlled-channel attacks: deterministic side channels for Untrusted Operating Systems, Xu et al

GhostRider: A Hardware-Software System for Memory Trace Oblivious Computation, Liu et al

Optional reading:

Path ORAM: An Extremely Simple Oblivious RAM Protocol, Stefanov et al

Questions: