Glad to announce that our paper "PICACHV: Formally Verified Data Use Policy Enforcement for Secure Data Analytics" has been accepted to USENIX Security 2025!
You can check the paper on Arxiv here https://t.co/iutfOKeHZK
For SGX, folks designed LibOSes to support system calls, disk I/Os, and some other stuff to support unmodified binaries inside them, which unfortunately bloats the TCB, while some people design a SGX inside TDX due to the potential flaws in the guest OS. This is kinda funny.
As I have done more research on TEEs, I feel like this area is facing a serious dilemma and no work seems to be able to address it. That is, what should be inside the TEE? SGX is criticized for being overly restrictive and people have to hack it to port legacy code.
So today's TEE designs transitioned to VM-based, but this still raises a question about the TCB size thereof since it now includes the whole OS and other (perhaps unnecessary) runtimes into the protected area and the trustworthiness is rather dubious.
Kudos to @chbhongbo for this work! Thrilled to be able to work with him on formal methods + TEE ;) Also feel so glad to be present at @USENIXSecurity symposium!
I’m presenting our work on verification of Confidential Computing as a Service (CCaaS) @USENIXSecurity 23.
If you’re interested, please come to Platinum Salon 7–8 on Aug. 10 at 4:45 pm–5:45 pm (track 3).
Check our artifact and paper in this repository: https://t.co/COVoQNdXkV
After taking courses (MLTT, dependent types, etc) at the n-type summer school, I began to sense the magic of type theory. I had a strong feeling that everything in compuer science and security stuffs can be fully formalized. Gonna learn more on this topic ;)
Omg after experimenting with lean4 theorem prover i think lean4 is better than coq, and they even introduce package manager like cargo lol. I thin i can try it on my new project.🤔
My mood: they finally started to implement the memory manager with EDMM after our paper was accepted after the major revision in which we stated there is no official memory management support for EDMM in Rust SGX SDK.🥲