TEE: Secure DB

A hardware-based approach, leveraging Intel’s SGX, for search over encrypted data. It implements only the security critical core, i.e., the search functionality, in the trusted environment and resorts to untrusted software for the remainder.

proposes a new in-memory key-value store designed for SGX with application-specific data security management.

utilizes multiple SGX enclaves to enforce data isolation among co-located tenants.

the design of SPEICHER extends the trust in shielded execution beyond the secure SGX enclave memory region to ensure that the security properties are also preserved in the stateful (or non-volatile) setting of an untrusted storage medium, including system crash, reboot, or migration. More