[PriSC'25] Automatic Inference of Enclave Placement in LLVM Compiler

Automatic Inference of Enclave Placement in LLVM Compiler (Video, PriSC 2025)
Wesley B Nuzzo, Mohamed Elwakil, and Anitha Gollamudi
(University of Massachusetts, Lowell (UML; U.S. Coast Guard Academy; University of Massachusetts Lowell)

Abstract: Trusted Execution Environments (TEEs) enable applications to obtain strong confidentiality and integrity guarantees even in the presence of privileged but malicious software. Key to their enforcement is an enclave – a secure hardware container that provides isolated execution. However, in order to build enclave-based applications, developers have to carefully partition their application. The process can be tedious and error prone.
In this work, we propose automatic inference of enclave placement in the LLVM compilation framework. Our enclave inference algorithm takes a non-enclave application along with a security policy; infers the enclave placement and compiles it to Intel SGX enclaves using OpenEnclave framework. By implementing at the level of LLVM IR, any application that gets compiled to LLVM IR can leverage our technique significantly reducing the programmer's burden.
Presentation at the PriSC 2025 workshop, January 19, 2025, https://popl25.sigplan.org/home/prisc-2025
Sponsored by ACM SIGPLAN

Видео [PriSC'25] Automatic Inference of Enclave Placement in LLVM Compiler канала ACM SIGPLAN