2016 RyoanADistributedSandboxforUntr

• (Hunt et al., 2016) ⇒ Tyler Hunt, Zhiting Zhu, Yuanzhong Xu, Simon Peter, and Emmett Witchel. (2016). “Ryoan: A Distributed Sandbox for Untrusted Computation on Secret Data.” In: Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 20€™16). ISBN:978-1-931971-33-1

Subject Headings: Ryoan Sandbox, Chiron System.

Cited By

• Hunt et al., 2018.
• http://scholar.google.com/scholar?q=%222016%22+Ryoan%3A+A+Distributed+Sandbox+for+Untrusted+Computation+on+Secret+Data
• http://dl.acm.org/citation.cfm?id=3026877.3026919&preflayout=flat#citedby

Quotes

Abstract

Users of modern data-processing services such as tax preparation or genomic screening are forced to trust them with data that the users wish to keep secret. Ryoan protects secret data while it is processed by services that the data owner does not trust. Accomplishing this goal in a distributed setting is difficult because the user has no control over the service providers or the computational platform. Confining code to prevent it from leaking secrets is notoriously difficult, but Ryoan benefits from new hardware and a request-oriented data model. Ryoan provides a distributed sandbox, leveraging hardware enclaves (e.g., Intel's software guard extensions (SGX) [15 ]) to protect sandbox instances from potentially malicious computing platforms. The protected sandbox instances confine untrusted data-processing modules to prevent leakage of the user's input data. Ryoan is designed for a request-oriented data model, where confined modules only process input once and do not persist state about the input. We present the design and prototype implementation of Ryoan and evaluate it on a series of challenging problems including email filtering, heath analysis, image processing and machine translation.

References

;

	Author	volume	Date Value	title	type	journal	titleUrl	doi	note	year
2016 RyoanADistributedSandboxforUntr	Tyler Hunt Emmett Witchel Zhiting Zhu Yuanzhong Xu Simon Peter			Ryoan: A Distributed Sandbox for Untrusted Computation on Secret Data						2016