This Paper Is Included in the Proceedings of the 12th Usenix Symposium on Operating Systems Design and Implementation (osdi '16). Ryoan: a Distributed Sandbox for Untrusted Computation on Secret…

By Tyler Hunt, Zhiting Zhu, Yuanzhong Xu, Simon Peter, Emmett Witchel

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contracts (2018, neutral): “[68] leverage SGX to offer privacy-preserving data analytics and machine learning with various security guarantees, Ryoan [41] is a distributed sandbox platform using SGX to confine privacy leakage from untrusted applications that process sensitive data.”
Komodo: Using verification to disentangle secure-enclave hardware from software (2017, background): “In the short time since the SGX specification was published, a wide range of applications have been devised [e.g., 5, 8, 9, 14, 21, 42, 65, 68, 75], and competing vendors are developing similar features [48].”
Occlumency: Privacy-preserving Remote Deep-learning Inference Using SGX (2019, methodology): “Chiron [41], Ryoan [42], and Slalom [71] used SGX for ML-inference tasks, including both training and inference.”
SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs (2017, background): “Ryoan [26] also adopts SFI in SGX to guarantee data privacy between multiple distrusted parties.”
REM: Resource-Efficient Mining for Blockchains (2017, background): “Ryoan [44] is a framework that allows a server to run code on private client data and return the output to the client.”
SGX-Bomb: Locking Down the Processor via Rowhammer Attack (2017, methodology): “A two-way sandbox [17] that restricts instructions an enclave process can use (e.”
SGX-LKL: Securing the Host OS Interface for Trusted Execution (2019, methodology): “han SGXLKL and do not support an oblivious host interface. Similar to SGX-LKL, SCONE [8] also implements user-level threading inside the enclave to reduce costly enclave transitions of threads. Ryoan [46] uses SGX enclaves to sandbox data processing. It makes the data ﬂow independent from the conten”
SgxPectre Attacks: Leaking Enclave Secrets via Speculative Execution (2018, background): “ion has encouraged researchers and practitioners to develop various new applications to utilize these features (e.g., [2, 22, 51, 54, 59, 68, 69, 85, 88]), and new software tools or frameworks (e.g., [4, 5, 9, 24, 43, 50, 61, 65, 67, 72, 80]) to help developers adopt this emerging programming paradi”
SgxPectre: Stealing Intel Secrets from SGX Enclaves Via Speculative Execution (2018, background): “ion has encouraged researchers and practitioners to develop various new applications to utilize these features (e.g., [2, 22, 51, 54, 59, 68, 69, 85, 88]), and new software tools or frameworks (e.g., [4, 5, 9, 24, 43, 50, 61, 65, 67, 72, 80]) to help developers adopt this emerging programming paradi”
T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs (2017, background): “Ryoan [22] introduces a distributed two-way sandbox to run untrusted enclave programs with sensitive user data while preventing possible information leakage.”
Eleos: ExitLess OS Services for SGX Enclaves (2017, methodology): “Ryoan [17] is a system used to execute enclaves in a sandbox and distributed environment.”
Software Grand Exposure: SGX Cache Attacks Are Practical (2017, methodology): “First applications leveraging SGX support were already developed and consider cloud scenarios [4, 56, 17, 16, 27, 78] and beyond [38, 60].”
Chiron: Privacy-preserving Machine Learning as a Service (2018, methodology): “Each training enclave is a Ryoan [41] sandbox augmented with an ML toolchain, as depicted in Figure 4.”
The Efficient Server Audit Problem, Deduplicated Re-execution, and the Web (2017, methodology): “This includes TPM-based approaches [27, 44, 58, 59, 66, 71, 74, 79] and systems [14, 17, 48, 73, 77] built on SGX hardware [49].”
Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX (2017, background): “Ryoan [22] sandboxes a piece of untrusted code in the enclave to process secret data while preventing the loaded code from leaking secret data.”