> Detailanzeige

Ménétrey, Jämes [VerfasserIn]; Grüter, Aeneas [VerfasserIn]; Yuhala, Peterson [VerfasserIn]; Oeftiger, Julius [VerfasserIn]; Felber, Pascal [VerfasserIn]; Pasin, Marcelo [VerfasserIn]; Schiavoni, Valerio [VerfasserIn] ; Jämes Ménétrey and Aeneas Grüter and Peterson Yuhala and Julius Oeftiger and Pascal Felber and Marcelo Pasin and Valerio Schiavoni [MitwirkendeR]

A Holistic Approach for Trustworthy Distributed Systems with WebAssembly and TEEs

Literatur-
verwaltung

Zur
Merkliste

Lösche von
Merkliste

Per Whatsapp teilen

Schließen

Merkliste



Sie können Bookmarks mittels Listen verwalten, loggen Sie sich dafür bitte in Ihr SLUB Benutzerkonto ein.
  • Medientyp: E-Artikel; Elektronischer Konferenzbericht; Sonstige Veröffentlichung
  • Titel: A Holistic Approach for Trustworthy Distributed Systems with WebAssembly and TEEs
  • Beteiligte: Ménétrey, Jämes [VerfasserIn]; Grüter, Aeneas [VerfasserIn]; Yuhala, Peterson [VerfasserIn]; Oeftiger, Julius [VerfasserIn]; Felber, Pascal [VerfasserIn]; Pasin, Marcelo [VerfasserIn]; Schiavoni, Valerio [VerfasserIn]
  • Erschienen: Schloss Dagstuhl – Leibniz-Zentrum für Informatik, 2024
  • Sprache: Englisch
  • DOI: https://doi.org/10.4230/LIPIcs.OPODIS.2023.23
  • Schlagwörter: TLS ; Attestation ; Trusted Execution Environment ; Publish/Subscribe ; Cloud-Edge Continuum ; WebAssembly
  • Entstehung:
  • Anmerkungen: Diese Datenquelle enthält auch Bestandsnachweise, die nicht zu einem Volltext führen.
  • Beschreibung: Publish/subscribe systems play a key role in enabling communication between numerous devices in distributed and large-scale architectures. While widely adopted, securing such systems often trades portability for additional integrity and attestation guarantees. Trusted Execution Environments (TEEs) offer a potential solution with enclaves to enhance security and trust. However, application development for TEEs is complex, and many existing solutions are tied to specific TEE architectures, limiting adaptability. Current communication protocols also inadequately manage attestation proofs or expose essential attestation information. This paper introduces a novel approach using WebAssembly to address these issues, a key enabling technology nowadays capturing academia and industry attention. We present the design of a portable and fully attested publish/subscribe middleware system as a holistic approach for trustworthy and distributed communication between various systems. Based on this proposal, we have implemented and evaluated in-depth a fully-fledged publish/subscribe broker running within Intel SGX, compiled in WebAssembly, and built on top of industry-battled frameworks and standards, i.e., MQTT and TLS protocols. Our extended TLS protocol preserves the privacy of attestation information, among other benefits. Our experimental results showcase most overheads, revealing a 1.55× decrease in message throughput when using a trusted broker. We open-source the contributions of this work to the research community to facilitate experimental reproducibility.
  • Zugangsstatus: Freier Zugang