A Design and Verification Methodology for Secure Isolated Regions

Rohit Sinha, Manuel Costa, Akash Lal, Nuno P. Lopes, Sriram Rajamani, Sanjit A. Seshia, Kapil Vaswani

Abstract:

Hardware support for isolated execution (such as Intel SGX) enables development of applications that keep their code and data confidential even while running on a hostile or compromised host. However, automatically verifying that such applications satisfy confidentiality remains challenging. We present a methodology for designing such applications in a way that enables certifying their confidentiality. Our methodology consists of forcing the application to communicate with the external world through a narrow interface, compiling it with runtime checks that aid verification, and linking it with a small runtime library that implements the interface. The runtime library includes core services such as secure communication channels and memory management. We formalize this restriction on the application as Information Release Confinement (IRC), and we show that it allows us to decompose the task of proving confidentiality into (a) one-time, human-assisted functional verification of the runtime to ensure that it does not leak secrets, (b) automatic verification of the application's machine code to ensure that it satisfies IRC and does not directly read or corrupt the runtime's internal state. We present /Confidential: a verifier for IRC that is modular, automatic, and keeps our compiler out of the trusted computing base. Our evaluation suggests that the methodology scales to real-world applications.

Published:

R. Sinha, M. Costa, A. Lal, N. P. Lopes, S. Rajamani, S. A. Seshia, K. Vaswani. A Design and Verification Methodology for Secure Isolated Regions. In Proc. of the 37th annual ACM SIGPLAN conference on Programming Language Design and Implementation (PLDI), June 2016.

Download:

Editor
PDF

Bibtex:

@inproceedings{slashconf-pldi16,
  title =	{A Design and Verification Methodology for Secure Isolated Regions},
  author =	{Rohit Sinha and Manuel Costa and Akash Lal and Nuno P. Lopes and Sriram Rajamani and Sanjit A. Seshia and Kapil Vaswani},
  booktitle =	{Proc. of the 37th annual ACM SIGPLAN conference on Programming Language Design and Implementation (PLDI)},
  doi =		{10.1145/2908080.2908113},
  month =	jun,
  year =	2016
}

Copyright notice:

<-- Return