Execution Environments for Running Legacy Applications in Multi-Party Trust Settings

Simple item page
dc.contributor.advisorLevin, Daveen_US
dc.contributor.authorHerwig, Stephen Marken_US
dc.contributor.departmentComputer Scienceen_US
dc.contributor.publisherDigital Repository at the University of Marylanden_US
dc.contributor.publisherUniversity of Maryland (College Park, Md.)en_US
dc.date.accessioned2021-09-22T05:35:46Z
dc.date.available2021-09-22T05:35:46Z
dc.date.issued2021en_US
dc.description.abstractApplications often assume that the same party owns all of the application’s resources, and that these resources require the same level of privacy. This assumption no longer holds when organizations outsource applications to a third-party cloud, or when the application requires access to not only public content, but private configuration, such as authentication and keying material. The result of this broken assumption is that applications either must be re-written to accommodate each new security posture, or used as-is, accepting that one party exposes private data to another. In this dissertation, I argue the following thesis: it is possible to run legacy application binaries with confidentiality and integrity guarantees that reflect a multi-party trust setting. I support this thesis through the design, implementation, and evaluation of two distinct application-level virtualization layers that handle trust concerns on behalf of the application: conclaves and SecureMigration. Conclaves assume the availability of Intel SGX secure hardware enclaves and extend prior work in developing runtimes that execute legacy applications within an enclave. In contrast, SecureMigration does not use secure hardware, but rather composes information flow control with process migration to execute a process across multiple physical machines owned and operated by distinct principals, while shielding each principal’s sensitive portion of the process from its peers.en_US
dc.identifierhttps://doi.org/10.13016/ygsx-zja9
dc.identifier.urihttp://hdl.handle.net/1903/27943
dc.language.isoenen_US
dc.subject.pqcontrolledComputer scienceen_US
dc.subject.pquncontrolledIntel SGXen_US
dc.subject.pquncontrolledSecure remote computationen_US
dc.subject.pquncontrolledVirtualizationen_US
dc.titleExecution Environments for Running Legacy Applications in Multi-Party Trust Settingsen_US
dc.typeDissertationen_US

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Herwig_umd_0117E_21927.pdf
Size:
798.01 KB
Format:
Adobe Portable Document Format
Download

Collections

UMD Theses and Dissertations
Computer Science Theses and Dissertations