PRIDWEN: Universally Hardening SGX Programs via Load-Time Synthesis
WASM bin is instrumented according to hardware configuration detected by the Prober and a configuration file. The instrumented binary is then validated and can be attested by the remote user.
- The validator works like a final binary verifier to check if the instrumentations exist as expected.
- Attestation: software attestation in PRIDWEN
- The first platform-aware load-time synthesis framework for SGX programs
- Attestable in-enclave Wasm instrumentation and compilation toolchain.
- Extensive evaluation.