69 citations · 767 across the 45 of their papers we have counts for
15 papers · 1 filter
Preventing EFail Attacks with Client-Side WebAssembly: The Case of Swiss Post's IncaMail
Pascal Gerig, Jämes Ménétrey, Baptiste Lanoix +4
Traditional email encryption schemes are vulnerable to EFail attacks, which exploit the lack of message authentication by manipulating ciphertexts and exfiltrating plaintext via HT…
Montsalvat: Partitioning Java Applications to Minimize the TCB in Intel SGX
Peterson Yuhala, Jämes Ménétrey, Pascal Felber +5
The popularity of the Java programming language has led to its wide adoption in cloud computing infrastructures. However, Java applications running in untrusted clouds are vulnerab…
SGX Switchless Calls Made Configless
Peterson Yuhala, Michael Paper, Timothée Zerbib +3
Intel's software guard extensions (SGX) provide hardware enclaves to guarantee confidentiality and integrity for sensitive code and data. However, systems leveraging such security…
WaTZ: A Trusted WebAssembly Runtime Environment with Remote Attestation for TrustZone
Jämes Ménétrey, Marcelo Pasin, Pascal Felber +1
WebAssembly (Wasm) is a novel low-level bytecode format that swiftly gained popularity for its efficiency, versatility and security, with near-native performance. Besides, trusted…
Attestation Mechanisms for Trusted Execution Environments Demystified
Jämes Ménétrey, Christian Göttel, Anum Khurshid +4
Attestation is a fundamental building block to establish trust over software systems. When used in conjunction with trusted execution environments, it guarantees the genuineness of…
An Exploratory Study of Attestation Mechanisms for Trusted Execution Environments
Jämes Ménétrey, Christian Göttel, Marcelo Pasin +2
Attestation is a fundamental building block to establish trust over software systems. When used in conjunction with trusted execution environments, it guarantees that genuine code…
Plinius: Secure and Persistent Machine Learning Model Training
Peterson Yuhala, Pascal Felber, Valerio Schiavoni +1
With the increasing popularity of cloud based machine learning (ML) techniques there comes a need for privacy and integrity guarantees for ML data. In addition, the significant sca…
Twine: An Embedded Trusted Runtime for WebAssembly
Jämes Ménétrey, Marcelo Pasin, Pascal Felber +1
WebAssembly is an increasingly popular lightweight binary instruction format, which can be efficiently embedded and sandboxed. Languages like C, C++, Rust, Go, and many others can…
TEEMon: A continuous performance monitoring framework for TEEs
Robert Krahn, Donald Dragoti, Franz Gregor +6
Trusted Execution Environments (TEEs), such as Intel Software Guard eXtensions (SGX), are considered as a promising approach to resolve security challenges in clouds. TEEs protect…
Trust Management as a Service: Enabling Trusted Execution in the Face of Byzantine Stakeholders
Franz Gregor, Wojciech Ozga, Sébastien Vaucher +7
Trust is arguably the most important challenge for critical services both deployed as well as accessed remotely over the network. These systems are exposed to a wide diversity of t…
Anonymous and confidential file sharing over untrusted clouds
Stefan Contiu, Sébastien Vaucher, Rafael Pires +3
Using public cloud services for storing and sharing confidential data requires end users to cryptographically protect both the data and the access to the data. In some cases, the i…
Malware in the SGX supply chain: Be careful when signing enclaves!
Vlad Crăciun, Pascal Felber, Andrei Mogage +2
Malware attacks are a significant part of the new software security threats detected each year. Intel Software Guard Extensions (SGX) are a set of hardware instructions introduced…
IBBE-SGX: Cryptographic Group Access Control using Trusted Execution Environments
Stefan Contiu, Rafael Pires, Sébastien Vaucher +3
While many cloud storage systems allow users to protect their data by making use of encryption, only few support collaborative editing on that data. A major challenge for enabling…
Confidentiality-Preserving Publish/Subscribe: A Survey
Emanuel Onica, Pascal Felber, Hugues Mercier +1
Publish/subscribe (pub/sub) is an attractive communication paradigm for large-scale distributed applications running across multiple administrative domains. Pub/sub allows event-ba…
Intel MPX Explained: An Empirical Study of Intel MPX and Software-based Bounds Checking Approaches
Oleksii Oleksenko, Dmitrii Kuvaiskii, Pramod Bhatotia +2
Memory-safety violations are a prevalent cause of both reliability and security vulnerabilities in systems software written in unsafe languages like C/C++. Unfortunately, all the e…