Paper presented at the 9th Jornadas Nacionales de Investigación en Ciberseguridad (JNIC 2024, Seville), written in Spanish: “Desarrollo de Servicios Confiables en Kubernetes Utilizando TEEs”.
Cloud services process large amounts of sensitive data, so they need to guarantee its confidentiality and integrity. Confidential computing addresses this with hardware-based Trusted Execution Environments (TEEs) that limit access to unencrypted data, which makes them a good fit for clouds where the infrastructure belongs to third parties that are not always trusted.
In this work we built a trusted service for predictive vehicle maintenance on top of the TEE provided by Intel SGX, and deployed it the way most organizations deploy software today: containers and Kubernetes. The results show that confidential computing is effective, and necessary, to strengthen the security of current cloud services.
Ferreiro Ferrón, D., López Feijoo, M., López Román, I. and Vázquez Saavedra, A. (2024). Desarrollo de Servicios Confiables en Kubernetes Utilizando TEEs. JNIC 2024, Seville, pp. 428–435.