Re: [PATCH v6 00/11] Intel SGX Driver

["Dr. Greg Wettstein" <greg@wind.enjellic.com>]

On Jan 3,  3:00am, Christian Stroetmann wrote:
} Subject: Re: [PATCH v6 00/11] Intel SGX Driver

Good morning, I hope the day is going well for you.

> > Philosophically we take the approach that for high security
> > assurance environments that it is virtually impossible to allow
> > any untrusted code to run on a platform.  Which is why we focus on
> > autonomous introspection for these environments.

> Interesting.  I would like to hear more about this autonomous
> introspection concept, specifically what it monitors and how it
> reacts on an issue.

AI as we call it.. :-), at a high level, is the notion that an
operating system platform can be modeled for its intended behavior,
just as is done for buildings, bridges and airplanes.  The model is
based on a precise mathematical description of the set of desired
information exchange events that the operating system will be allowed
to mediate.

Autonomous introspection is the notion of the platform using this
model to monitor and self-regulate its behavior.

> Maybe you have a summary or short introduction of the concept or/and
> a link to a document.

The initial concept and implementation were described by the following
Linux Security Summit paper:

http://kernsec.org/files/lss2015/idfusion-iso-identity-paper.pdf

The work has matured a great deal since then.

Most notably the modeling and control engine have been lifted out of
the kernel into an SGX enclave.  In this architecture the kernel
cannot act without permission from the enclave based engine, which
requires the integrity of the enclave to be violated in order to
compromise the kernel.

A virtuous circle.

> Regards
> Christian Stroetmann

We can engage further in private e-mail as this may or may not be of
general interest.

Thanks for the interest.

Have a good day.

Greg

}-- End of excerpt from Christian Stroetmann

As always,
Dr. G.W. Wettstein, Ph.D.   Enjellic Systems Development, LLC.
4206 N. 19th Ave.           Specializing in information infra-structure
Fargo, ND  58102            development.
PH: 701-281-1686
FAX: 701-281-3949           EMAIL: greg@enjellic.com
------------------------------------------------------------------------------
"Four year projections, are you kidding me.  We don't know what we are
 supposed to be doing at the 4 o'clock meeting this afternoon."
                                -- Terry Wieland
                                   Resurrection