{"id":"https://openalex.org/W2908930990","doi":"https://doi.org/10.1109/tcc.2019.2892449","title":"Architectural Protection of Trusted System Services for SGX Enclaves in Cloud Computing","display_name":"Architectural Protection of Trusted System Services for SGX Enclaves in Cloud Computing","publication_year":2019,"publication_date":"2019-01-14","ids":{"openalex":"https://openalex.org/W2908930990","doi":"https://doi.org/10.1109/tcc.2019.2892449","mag":"2908930990"},"language":"en","primary_location":{"id":"doi:10.1109/tcc.2019.2892449","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2019.2892449","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100354105","display_name":"Hongliang Liang","orcid":"https://orcid.org/0000-0001-6877-780X"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongliang Liang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6877-780X","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100335522","display_name":"Mingyu Li","orcid":"https://orcid.org/0009-0009-0264-8189"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingyu Li","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024715210","display_name":"Yixiu Chen","orcid":"https://orcid.org/0000-0002-9173-7651"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixiu Chen","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9173-7651","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089701613","display_name":"Tianqi Yang","orcid":"https://orcid.org/0000-0001-5358-9144"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianqi Yang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015933851","display_name":"Zhuosi Xie","orcid":"https://orcid.org/0000-0001-6053-3317"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuosi Xie","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6053-3317","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101903807","display_name":"Lin Jiang","orcid":"https://orcid.org/0000-0002-4493-3377"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Jiang","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I139759216"],"apc_list":null,"apc_paid":null,"fwci":0.4339,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.70332917,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"9","issue":"3","first_page":"910","last_page":"922"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hypervisor","display_name":"Hypervisor","score":0.8588922619819641},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7934830188751221},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.679038405418396},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6790093183517456},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6262759566307068},{"id":"https://openalex.org/keywords/trusted-computing","display_name":"Trusted Computing","score":0.6223217248916626},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5783928036689758},{"id":"https://openalex.org/keywords/direct-anonymous-attestation","display_name":"Direct Anonymous Attestation","score":0.5211929678916931},{"id":"https://openalex.org/keywords/trusted-network-connect","display_name":"Trusted Network Connect","score":0.4478951394557953},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.41551828384399414},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3460080921649933},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.314308226108551}],"concepts":[{"id":"https://openalex.org/C112904061","wikidata":"https://www.wikidata.org/wiki/Q1077480","display_name":"Hypervisor","level":4,"score":0.8588922619819641},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7934830188751221},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.679038405418396},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6790093183517456},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6262759566307068},{"id":"https://openalex.org/C2776831232","wikidata":"https://www.wikidata.org/wiki/Q966812","display_name":"Trusted Computing","level":2,"score":0.6223217248916626},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5783928036689758},{"id":"https://openalex.org/C169796023","wikidata":"https://www.wikidata.org/wiki/Q3708936","display_name":"Direct Anonymous Attestation","level":3,"score":0.5211929678916931},{"id":"https://openalex.org/C206149592","wikidata":"https://www.wikidata.org/wiki/Q3999882","display_name":"Trusted Network Connect","level":3,"score":0.4478951394557953},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41551828384399414},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3460080921649933},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.314308226108551}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcc.2019.2892449","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcc.2019.2892449","pdf_url":null,"source":{"id":"https://openalex.org/S2492498579","display_name":"IEEE Transactions on Cloud Computing","issn_l":"2168-7161","issn":["2168-7161","2372-0018"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cloud Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6733505969","display_name":null,"funder_award_id":"U1713212","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7158186795","display_name":null,"funder_award_id":"91418206","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W1424350945","https://openalex.org/W1534092936","https://openalex.org/W1569778844","https://openalex.org/W1586851617","https://openalex.org/W1655958391","https://openalex.org/W2018045700","https://openalex.org/W2061643296","https://openalex.org/W2062025743","https://openalex.org/W2073294836","https://openalex.org/W2101889913","https://openalex.org/W2102001185","https://openalex.org/W2108388750","https://openalex.org/W2112735498","https://openalex.org/W2117094020","https://openalex.org/W2127295197","https://openalex.org/W2130694829","https://openalex.org/W2131726714","https://openalex.org/W2136310957","https://openalex.org/W2143999355","https://openalex.org/W2150615820","https://openalex.org/W2150620897","https://openalex.org/W2150709728","https://openalex.org/W2158699246","https://openalex.org/W2186512728","https://openalex.org/W2316567509","https://openalex.org/W2343394337","https://openalex.org/W2398041201","https://openalex.org/W2475909893","https://openalex.org/W2519006453","https://openalex.org/W2525658600","https://openalex.org/W2533941064","https://openalex.org/W2561955909","https://openalex.org/W2575735093","https://openalex.org/W2583196029","https://openalex.org/W2599829375","https://openalex.org/W2604858371","https://openalex.org/W2612012086","https://openalex.org/W2620979425","https://openalex.org/W2625154275","https://openalex.org/W2726246108","https://openalex.org/W2741593962","https://openalex.org/W2751624957","https://openalex.org/W2790063371","https://openalex.org/W2794645867","https://openalex.org/W2883613460","https://openalex.org/W2888798936","https://openalex.org/W2963311060","https://openalex.org/W3100917375","https://openalex.org/W4243947286","https://openalex.org/W6628430602","https://openalex.org/W6676104933","https://openalex.org/W6730426483","https://openalex.org/W6732525005","https://openalex.org/W6742578501","https://openalex.org/W6753443810","https://openalex.org/W6926872087"],"related_works":["https://openalex.org/W2355956995","https://openalex.org/W2381474365","https://openalex.org/W2372678089","https://openalex.org/W2086874776","https://openalex.org/W104943326","https://openalex.org/W2350048275","https://openalex.org/W2389819096","https://openalex.org/W2508973909","https://openalex.org/W2001281341","https://openalex.org/W2763925850"],"abstract_inverted_index":{"Data":[0],"security":[1],"and":[2,94,124,135,154,165,176],"privacy":[3],"are":[4],"of":[5,10,66,71,82,156],"great":[6],"concern":[7],"for":[8,58,110,148,192],"users":[9],"cloud":[11],"computing.":[12],"In":[13],"order":[14],"to":[15,49,105,142],"provide":[16,106],"such":[17,29],"guarantees":[18],"in":[19],"public":[20],"clouds,":[21],"hardware":[22],"manufacturers":[23],"have":[24],"designed":[25],"trusted":[26,78,107,163,166,189],"execution":[27],"environments":[28],"as":[30],"Intel\u2019s":[31],"Software":[32],"Guard":[33],"eXtensions":[34],"(SGX).":[35],"Intel":[36,67,116],"SGX":[37,46,111],"supports":[38],"privacy-preserving,":[39],"tamper-proof":[40],"containments":[41],"called":[42],"enclaves.":[43,112,149],"Regrettably,":[44],"an":[45,137],"enclave":[47],"has":[48],"rely":[50],"on":[51,76],"the":[52,63,72,88,152],"untrusted":[53],"operating":[54],"system":[55,108,146,161,180,190],"or":[56],"hypervisor":[57],"underlying":[59],"services,":[60],"which":[61],"contradicts":[62],"threat":[64],"model":[65],"SGX.":[68],"Whereas":[69],"much":[70],"previous":[73],"work":[74],"concentrates":[75],"protecting":[77],"applications":[79],"by":[80,90],"means":[81],"modifying":[83],"a":[84,100],"hypervisor,":[85],"we":[86,131,158,169],"tackle":[87],"problem":[89],"reusing":[91],"existing":[92,115],"drivers":[93],"leveraging":[95],"processor-enforced":[96],"protection.":[97],"We":[98],"propose":[99],"novel":[101],"approach,":[102],"named":[103],"SMK,":[104,157],"services":[109,147,191],"SMK":[113,186],"leverages":[114],"architecture":[117],"features,":[118],"i.e.,":[119],"System":[120],"Management":[121],"Mode":[122],"(SMM)":[123],"Uniform":[125],"Extensible":[126],"Firmware":[127],"Interface":[128],"(UEFI).":[129],"Specifically,":[130],"retrofit":[132],"UEFI":[133],"firmware":[134],"design":[136],"isolated":[138],"micro-kernel":[139],"inside":[140],"SMM":[141],"securely":[143],"provision":[144],"critical":[145],"To":[150],"highlight":[151],"effectiveness":[153],"extensibility":[155],"implement":[159],"two":[160,171],"services:":[162],"clock":[164],"network.":[167],"Furthermore,":[168],"harden":[170],"real-world":[172],"security-sensitive":[173],"applications,":[174],"OpenSSL":[175],"OpenVPN,":[177],"with":[178,194],"SMK\u2019s":[179],"services.":[181],"Our":[182],"evaluation":[183],"indicates":[184],"that":[185],"can":[187],"supply":[188],"enclaves":[193],"modest":[195],"runtime":[196],"overheads.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}