PRIDWEN: Universally Hardening SGX Programs via Load-Time Synthesis

 October 11, 2022 at 9:53 pm

PDF

WASM bin is instrumented according to hardware configuration detected by the Prober and a configuration file. The instrumented binary is then validated and can be attested by the remote user.

  • The validator works like a final binary verifier to check if the instrumentations exist as expected.
  • Attestation: software attestation in PRIDWEN

Contributions

  • The first platform-aware load-time synthesis framework for SGX programs
  • Attestable in-enclave Wasm instrumentation and compilation toolchain.
  • Extensive evaluation.