{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T08:34:20Z","timestamp":1777106060808,"version":"3.51.4"},"reference-count":87,"publisher":"Association for Computing Machinery (ACM)","issue":"6","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Proc. VLDB Endow."],"published-print":{"date-parts":[[2023,2]]},"abstract":"<jats:p>As big data processing in the cloud becomes prevalent today, data privacy on such public platforms raises critical concerns. Hardware-based trusted execution environments (TEEs) provide promising and practical platforms for low-cost privacy-preserving data processing. However, using TEEs to enhance the security of data analytics frameworks like Apache Spark involves challenging issues when separating various framework components into trusted and untrusted domains, demanding meticulous considerations for programmability, performance, and security.<\/jats:p>\n          <jats:p>Based on Intel SGX, we build Flare, a fast, secure, and memory-efficient data analytics framework with a familiar user programming interface and useful functionalities similar to Apache Spark. Flare ensures confidentiality and integrity by keeping sensitive data and computations encrypted and authenticated. It also supports oblivious processing to protect against access pattern side channels. The main innovations of Flare include a novel abstraction paradigm of shadow operators and shadow tasks to minimize trusted components and reduce domain switch overheads, memory-efficient data processing with proper granularities for different operators, and adaptive parallelization based on memory allocation intensity for better scalability. Flare outperforms the state-of-the-art secure framework by 3.0\u00d7 to 176.1\u00d7, and is also 2.8\u00d7 to 28.3\u00d7 faster than a monolithic libOS-based integration approach.<\/jats:p>","DOI":"10.14778\/3583140.3583158","type":"journal-article","created":{"date-parts":[[2023,4,20]],"date-time":"2023-04-20T16:45:59Z","timestamp":1682009159000},"page":"1439-1452","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":13,"title":["Flare: A Fast, Secure, and Memory-Efficient Distributed Analytics Framework"],"prefix":"10.14778","volume":"16","author":[{"given":"Xiang","family":"Li","sequence":"first","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabing","family":"Li","sequence":"additional","affiliation":[{"name":"Xi'an Jiaotong University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingyu","family":"Gao","sequence":"additional","affiliation":[{"name":"Tsinghua University, Shanghai Artificial Intelligence Lab, Shanghai Qi Zhi Institute"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,4,20]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"TrustZone: Integrated Hardware and Software Security. White paper","author":"Alves Tiago","year":"2004","unstructured":"Tiago Alves . 2004. TrustZone: Integrated Hardware and Software Security. White paper ( 2004 ). Tiago Alves. 2004. TrustZone: Integrated Hardware and Software Security. White paper (2004)."},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy.","author":"Anati Ittai","year":"2013","unstructured":"Ittai Anati , Shay Gueron , Simon Johnson , and Vincent Scarlata . 2013 . Innovative Technology for CPU Based Attestation and Sealing . In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy. Ittai Anati, Shay Gueron, Simon Johnson, and Vincent Scarlata. 2013. Innovative Technology for CPU Based Attestation and Sealing. In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy."},{"key":"e_1_2_1_3_1","volume-title":"Proceedings of 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 689--703","author":"Arnautov Sergei","year":"2016","unstructured":"Sergei Arnautov , Bohdan Trach , Franz Gregor , Thomas Knauth , Andre Martin , Christian Priebe , Joshua Lind , Divya Muthukumaran , Dan O'Keeffe , Mark L. Still-well, David Goltzsche , Dave Eyers , R\u00fcdiger Kapitza , Peter Pietzuch , and Christof Fetzer . 2016 . SCONE: Secure Linux Containers with Intel SGX . In Proceedings of 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 689--703 . Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, Andre Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Dan O'Keeffe, Mark L. Still-well, David Goltzsche, Dave Eyers, R\u00fcdiger Kapitza, Peter Pietzuch, and Christof Fetzer. 2016. SCONE: Secure Linux Containers with Intel SGX. In Proceedings of 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 689--703."},{"key":"e_1_2_1_4_1","volume-title":"Proceedings of the 2021 USENIX Annual Technical Conference (USENIX ATC). 65--79","author":"Bailleu Maurice","year":"2021","unstructured":"Maurice Bailleu , Dimitra Giantsidi , Vasilis Gavrielatos , Do Le Quoc , Vijay Nagarajan , and Pramod Bhatotia . 2021 . Avocado: A Secure In-Memory Distributed Storage System . In Proceedings of the 2021 USENIX Annual Technical Conference (USENIX ATC). 65--79 . Maurice Bailleu, Dimitra Giantsidi, Vasilis Gavrielatos, Do Le Quoc, Vijay Nagarajan, and Pramod Bhatotia. 2021. Avocado: A Secure In-Memory Distributed Storage System. In Proceedings of the 2021 USENIX Annual Technical Conference (USENIX ATC). 65--79."},{"key":"e_1_2_1_5_1","doi-asserted-by":"crossref","first-page":"752","DOI":"10.1109\/TKDE.2013.38","article-title":"TrustedDB: A Trusted Hardware-Based Database with Privacy and Data Confidentiality","volume":"26","author":"Bajaj Sumeet","year":"2013","unstructured":"Sumeet Bajaj and Radu Sion . 2013 . TrustedDB: A Trusted Hardware-Based Database with Privacy and Data Confidentiality . IEEE Transactions on Knowledge and Data Engineering (TKDE) 26 , 3 (2013), 752 -- 765 . Sumeet Bajaj and Radu Sion. 2013. TrustedDB: A Trusted Hardware-Based Database with Privacy and Data Confidentiality. IEEE Transactions on Knowledge and Data Engineering (TKDE) 26, 3 (2013), 752--765.","journal-title":"IEEE Transactions on Knowledge and Data Engineering (TKDE)"},{"key":"e_1_2_1_6_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2799647","article-title":"Shielding Applications from an Untrusted Cloud with Haven","volume":"33","author":"Baumann Andrew","year":"2015","unstructured":"Andrew Baumann , Marcus Peinado , and Galen Hunt . 2015 . Shielding Applications from an Untrusted Cloud with Haven . ACM Transactions on Computer Systems (TOCS) 33 , 3 (2015), 1 -- 26 . Andrew Baumann, Marcus Peinado, and Galen Hunt. 2015. Shielding Applications from an Untrusted Cloud with Haven. ACM Transactions on Computer Systems (TOCS) 33, 3 (2015), 1--26.","journal-title":"ACM Transactions on Computer Systems (TOCS)"},{"key":"e_1_2_1_7_1","doi-asserted-by":"crossref","first-page":"701","DOI":"10.1016\/j.comnet.2005.01.010","article-title":"Remote Timing Attacks Are Practical","volume":"48","author":"Brumley David","year":"2005","unstructured":"David Brumley and Dan Boneh . 2005 . Remote Timing Attacks Are Practical . Computer Networks 48 , 5 (2005), 701 -- 716 . David Brumley and Dan Boneh. 2005. Remote Timing Attacks Are Practical. Computer Networks 48, 5 (2005), 701--716.","journal-title":"Computer Networks"},{"key":"e_1_2_1_8_1","doi-asserted-by":"crossref","first-page":"253","DOI":"10.1145\/2490301.2451145","article-title":"Iago Attacks: Why the System Call API Is a Bad Untrusted RPC Interface","volume":"41","author":"Checkoway Stephen","year":"2013","unstructured":"Stephen Checkoway and Hovav Shacham . 2013 . Iago Attacks: Why the System Call API Is a Bad Untrusted RPC Interface . ACM SIGARCH Computer Architecture News 41 , 1 (2013), 253 -- 264 . Stephen Checkoway and Hovav Shacham. 2013. Iago Attacks: Why the System Call API Is a Bad Untrusted RPC Interface. ACM SIGARCH Computer Architecture News 41, 1 (2013), 253--264.","journal-title":"ACM SIGARCH Computer Architecture News"},{"key":"e_1_2_1_9_1","volume-title":"Proceedings of the 25th USENIX Security Symposium (USENIX Security). 857--874","author":"Costan Victor","year":"2016","unstructured":"Victor Costan , Ilia Lebedev , and Srinivas Devadas . 2016 . Sanctum: Minimal Hardware Extensions for Strong Software Isolation . In Proceedings of the 25th USENIX Security Symposium (USENIX Security). 857--874 . Victor Costan, Ilia Lebedev, and Srinivas Devadas. 2016. Sanctum: Minimal Hardware Extensions for Strong Software Isolation. In Proceedings of the 25th USENIX Security Symposium (USENIX Security). 857--874."},{"key":"e_1_2_1_10_1","first-page":"107","article-title":"MapReduce","volume":"51","author":"Dean Jeffrey","year":"2008","unstructured":"Jeffrey Dean and Sanjay Ghemawat . 2008 . MapReduce : Simplified Data Processing on Large Clusters. Commun. ACM 51 , 1 (2008), 107 -- 113 . Jeffrey Dean and Sanjay Ghemawat. 2008. MapReduce: Simplified Data Processing on Large Clusters. Commun. ACM 51, 1 (2008), 107--113.","journal-title":"Simplified Data Processing on Large Clusters. Commun. ACM"},{"key":"e_1_2_1_11_1","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2491--2493","author":"Ding Yu","year":"2017","unstructured":"Yu Ding , Ran Duan , Long Li , Yueqiang Cheng , Yulong Zhang , Tanghui Chen , Tao Wei , and Huibo Wang . 2017 . Poster: Rust SGX SDK: Towards Memory Safety in Intel SGX Enclave . In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2491--2493 . Yu Ding, Ran Duan, Long Li, Yueqiang Cheng, Yulong Zhang, Tanghui Chen, Tao Wei, and Huibo Wang. 2017. Poster: Rust SGX SDK: Towards Memory Safety in Intel SGX Enclave. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2491--2493."},{"key":"e_1_2_1_12_1","volume-title":"Proceedings of the 24th USENIX Security Symposium (USENIX Security). 447--462","author":"Anh Dinh Tien Tuan","year":"2015","unstructured":"Tien Tuan Anh Dinh , Prateek Saxena , Ee-Chien Chang , Beng Chin Ooi , and Chunwang Zhang . 2015 . M2R: Enabling Stronger Privacy in MapReduce Computation . In Proceedings of the 24th USENIX Security Symposium (USENIX Security). 447--462 . Tien Tuan Anh Dinh, Prateek Saxena, Ee-Chien Chang, Beng Chin Ooi, and Chunwang Zhang. 2015. M2R: Enabling Stronger Privacy in MapReduce Computation. In Proceedings of the 24th USENIX Security Symposium (USENIX Security). 447--462."},{"key":"e_1_2_1_13_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3322205.3311076","article-title":"Everything You Should Know About Intel SGX Performance on Virtualized Systems","volume":"3","author":"Ngoc Tu Dinh","year":"2019","unstructured":"Tu Dinh Ngoc , Bao Bui , Stella Bitchebe , Alain Tchana , Valerio Schiavoni , Pascal Felber , and Daniel Hagimont . 2019 . Everything You Should Know About Intel SGX Performance on Virtualized Systems . Proceedings of the ACM on Measurement and Analysis of Computing Systems 3 , 1, 1 -- 21 . Tu Dinh Ngoc, Bao Bui, Stella Bitchebe, Alain Tchana, Valerio Schiavoni, Pascal Felber, and Daniel Hagimont. 2019. Everything You Should Know About Intel SGX Performance on Virtualized Systems. Proceedings of the ACM on Measurement and Analysis of Computing Systems 3, 1, 1--21.","journal-title":"Proceedings of the ACM on Measurement and Analysis of Computing Systems"},{"key":"e_1_2_1_14_1","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1016\/j.comcom.2019.04.011","article-title":"Privacy-Preserving Cloud Computing on Sensitive Data: A Survey of Methods, Products and Challenges","volume":"140","author":"Domingo-Ferrer Josep","year":"2019","unstructured":"Josep Domingo-Ferrer , Oriol Farr\u00e0s , Jordi Ribes-Gonz\u00e1lez , and David S\u00e1nchez . 2019 . Privacy-Preserving Cloud Computing on Sensitive Data: A Survey of Methods, Products and Challenges . Computer Communications 140 (2019), 38 -- 60 . Josep Domingo-Ferrer, Oriol Farr\u00e0s, Jordi Ribes-Gonz\u00e1lez, and David S\u00e1nchez. 2019. Privacy-Preserving Cloud Computing on Sensitive Data: A Survey of Methods, Products and Challenges. Computer Communications 140 (2019), 38--60.","journal-title":"Computer Communications"},{"key":"e_1_2_1_15_1","volume-title":"Proceedings of the 33rd International Conference on International Conference on Machine Learning (ICML).","author":"Dowlin Nathan","year":"2016","unstructured":"Nathan Dowlin , Ran Gilad-Bachrach , Kim Laine , Kristin Lauter , Michael Naehrig , and John Wernsing . 2016 . CryptoNets: Applying Neural Networks to Encrypted Data with High Throughput and Accuracy . In Proceedings of the 33rd International Conference on International Conference on Machine Learning (ICML). Nathan Dowlin, Ran Gilad-Bachrach, Kim Laine, Kristin Lauter, Michael Naehrig, and John Wernsing. 2016. CryptoNets: Applying Neural Networks to Encrypted Data with High Throughput and Accuracy. In Proceedings of the 33rd International Conference on International Conference on Machine Learning (ICML)."},{"key":"e_1_2_1_16_1","doi-asserted-by":"crossref","first-page":"169","DOI":"10.14778\/3364324.3364331","article-title":"ObliDB: Oblivious Query Processing for Secure Databases","volume":"13","author":"Eskandarian Saba","year":"2019","unstructured":"Saba Eskandarian and Matei Zaharia . 2019 . ObliDB: Oblivious Query Processing for Secure Databases . Proc. VLDB Endow. 13 , 2 (2019), 169 -- 183 . Saba Eskandarian and Matei Zaharia. 2019. ObliDB: Oblivious Query Processing for Secure Databases. Proc. VLDB Endow. 13, 2 (2019), 169--183.","journal-title":"Proc. VLDB Endow."},{"key":"e_1_2_1_17_1","volume-title":"Jemalloc. In Proceedings of the 2006 BSDCan Conference (BSDCan).","author":"Evans Jason","year":"2006","unstructured":"Jason Evans . 2006 . Jemalloc. In Proceedings of the 2006 BSDCan Conference (BSDCan). Jason Evans. 2006. Jemalloc. In Proceedings of the 2006 BSDCan Conference (BSDCan)."},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 275--294","author":"Feng Erhu","year":"2021","unstructured":"Erhu Feng , Xu Lu , Dong Du , Bicheng Yang , Xueqiang Jiang , Yubin Xia , Binyu Zang , and Haibo Chen . 2021 . Scalable Memory Protection in the PENGLAI Enclave . In Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 275--294 . Erhu Feng, Xu Lu, Dong Du, Bicheng Yang, Xueqiang Jiang, Yubin Xia, Binyu Zang, and Haibo Chen. 2021. Scalable Memory Protection in the PENGLAI Enclave. In Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 275--294."},{"key":"e_1_2_1_19_1","volume-title":"Proceedings of the Cryptographic Hardware and Embedded Systems (CHES). 251--261","author":"Gandolfi Karine","year":"2001","unstructured":"Karine Gandolfi , Christophe Mourtel , and Francis Olivier . 2001 . Electromagnetic Analysis: Concrete Results . In Proceedings of the Cryptographic Hardware and Embedded Systems (CHES). 251--261 . Karine Gandolfi, Christophe Mourtel, and Francis Olivier. 2001. Electromagnetic Analysis: Concrete Results. In Proceedings of the Cryptographic Hardware and Embedded Systems (CHES). 251--261."},{"key":"e_1_2_1_21_1","volume-title":"Tcmalloc: Thread-Caching Malloc.","author":"Ghemawat Sanjay","year":"2009","unstructured":"Sanjay Ghemawat and Paul Menage . 2009 . Tcmalloc: Thread-Caching Malloc. Sanjay Ghemawat and Paul Menage. 2009. Tcmalloc: Thread-Caching Malloc."},{"key":"e_1_2_1_22_1","unstructured":"Wolfram Gloger. 2006. Ptmalloc Library.  Wolfram Gloger. 2006. Ptmalloc Library."},{"key":"e_1_2_1_23_1","volume-title":"Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 182--194","author":"Goldreich Oded","year":"1987","unstructured":"Oded Goldreich . 1987 . Towards a Theory of Software Protection and Simulation by Oblivious RAMs . In Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 182--194 . Oded Goldreich. 1987. Towards a Theory of Software Protection and Simulation by Oblivious RAMs. In Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 182--194."},{"key":"e_1_2_1_24_1","volume-title":"Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 218--229","author":"Goldreich O.","unstructured":"O. Goldreich , S. Micali , and A. Wigderson . 1987. How to Play ANY Mental Game . In Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 218--229 . O. Goldreich, S. Micali, and A. Wigderson. 1987. How to Play ANY Mental Game. In Proceedings of the 19th Annual ACM Symposium on Theory of Computing (STOC). 218--229."},{"key":"e_1_2_1_25_1","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1145\/233551.233553","article-title":"Software Protection and Simulation on Oblivious RAMs","volume":"43","author":"Goldreich Oded","year":"1996","unstructured":"Oded Goldreich and Rafail Ostrovsky . 1996 . Software Protection and Simulation on Oblivious RAMs . Journal of the ACM (JACM) 43 , 3 (1996), 431 -- 473 . Oded Goldreich and Rafail Ostrovsky. 1996. Software Protection and Simulation on Oblivious RAMs. Journal of the ACM (JACM) 43, 3 (1996), 431--473.","journal-title":"Journal of the ACM (JACM)"},{"key":"e_1_2_1_26_1","volume-title":"Proceedings of the 10th European Workshop on Systems Security. 1--6.","author":"G\u00f6tzfried Johannes","year":"2017","unstructured":"Johannes G\u00f6tzfried , Moritz Eckert , Sebastian Schinzel , and Tilo M\u00fcller . 2017 . Cache Attacks on Intel SGX . In Proceedings of the 10th European Workshop on Systems Security. 1--6. Johannes G\u00f6tzfried, Moritz Eckert, Sebastian Schinzel, and Tilo M\u00fcller. 2017. Cache Attacks on Intel SGX. In Proceedings of the 10th European Workshop on Systems Security. 1--6."},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of the ACM SIGPLAN 1993 Conference on Programming Language Design and Implementation (PLDI). 177--186","author":"Grunwald Dirk","year":"1993","unstructured":"Dirk Grunwald , Benjamin Zorn , and Robert Henderson . 1993 . Improving the Cache Locality of Memory Allocation . In Proceedings of the ACM SIGPLAN 1993 Conference on Programming Language Design and Implementation (PLDI). 177--186 . Dirk Grunwald, Benjamin Zorn, and Robert Henderson. 1993. Improving the Cache Locality of Memory Allocation. In Proceedings of the ACM SIGPLAN 1993 Conference on Programming Language Design and Implementation (PLDI). 177--186."},{"key":"e_1_2_1_28_1","first-page":"204","article-title":"A Memory Encryption Engine Suitable for General Purpose Processors","volume":"2016","author":"Gueron Shay","year":"2016","unstructured":"Shay Gueron . 2016 . A Memory Encryption Engine Suitable for General Purpose Processors . IACR Cryptol. ePrint Arch. 2016 (2016), 204 . Shay Gueron. 2016. A Memory Encryption Engine Suitable for General Purpose Processors. IACR Cryptol. ePrint Arch. 2016 (2016), 204.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_2_1_29_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy.","author":"Hoekstra Matthew","year":"2013","unstructured":"Matthew Hoekstra , Reshma Lal , Pradeep Pappachan , Vinay Phegade , and Juan Del Cuvillo . 2013 . Using Innovative Instructions to Create Trustworthy Software Solutions . In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy. Matthew Hoekstra, Reshma Lal, Pradeep Pappachan, Vinay Phegade, and Juan Del Cuvillo. 2013. Using Innovative Instructions to Create Trustworthy Software Solutions. In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy."},{"key":"e_1_2_1_30_1","volume-title":"Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP). 191--205","author":"Hund Ralf","year":"2013","unstructured":"Ralf Hund , Carsten Willems , and Thorsten Holz . 2013 . Practical Timing Side Channel Attacks against Kernel Space ASLR . In Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP). 191--205 . Ralf Hund, Carsten Willems, and Thorsten Holz. 2013. Practical Timing Side Channel Attacks against Kernel Space ASLR. In Proceedings of the 2013 IEEE Symposium on Security and Privacy (SP). 191--205."},{"key":"e_1_2_1_31_1","volume-title":"Retrieved","year":"2017","unstructured":"Intel. 2017 . Memory Encryption Technologies Specification . Retrieved June 30, 2022 from https:\/\/software.intel.com\/content\/dam\/develop\/external\/us\/en\/documents-tps\/multi-key-total-memory-encryption-spec.pdf Intel. 2017. Memory Encryption Technologies Specification. Retrieved June 30, 2022 from https:\/\/software.intel.com\/content\/dam\/develop\/external\/us\/en\/documents-tps\/multi-key-total-memory-encryption-spec.pdf"},{"key":"e_1_2_1_32_1","volume-title":"Retrieved","year":"2018","unstructured":"Intel. 2018 . Intel Software Guard Extensions (Intel SGX) Developer Guide . Retrieved June 30, 2022 from https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/download\/intel-software-guard-extensions-intel-sgx-developer-guide.html Intel. 2018. Intel Software Guard Extensions (Intel SGX) Developer Guide. Retrieved June 30, 2022 from https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/download\/intel-software-guard-extensions-intel-sgx-developer-guide.html"},{"key":"e_1_2_1_33_1","volume-title":"10th Gen Intel Core Processor Families Datasheet","year":"2022","unstructured":"Intel. 2020. 10th Gen Intel Core Processor Families Datasheet , Vol. 1 . Retrieved June 15, 2022 from https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/core\/10th-gen-core-families-datasheet-vol-1.html Intel. 2020. 10th Gen Intel Core Processor Families Datasheet, Vol. 1. Retrieved June 15, 2022 from https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/core\/10th-gen-core-families-datasheet-vol-1.html"},{"key":"e_1_2_1_34_1","volume-title":"Retrieved","year":"2021","unstructured":"Intel. 2021 . 3rd Gen Intel Xeon Scalable Processors with Intel SGX . Retrieved June 30, 2022 from https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/xeon\/3rd-gen-xeon-scalable-processors-brief.html Intel. 2021. 3rd Gen Intel Xeon Scalable Processors with Intel SGX. Retrieved June 30, 2022 from https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/xeon\/3rd-gen-xeon-scalable-processors-brief.html"},{"key":"e_1_2_1_35_1","volume-title":"Proceedings of the 15th ACM Asia Conference on Computer and Communications Security. 826--840","author":"Jiang Jianyu","year":"2020","unstructured":"Jianyu Jiang , Xusheng Chen , TszOn Li , Cheng Wang , Tianxiang Shen , Shixiong Zhao , Heming Cui , Cho-Li Wang , and Fengwei Zhang . 2020 . Uranus: Simple, Efficient SGX Programming and Its Applications . In Proceedings of the 15th ACM Asia Conference on Computer and Communications Security. 826--840 . Jianyu Jiang, Xusheng Chen, TszOn Li, Cheng Wang, Tianxiang Shen, Shixiong Zhao, Heming Cui, Cho-Li Wang, and Fengwei Zhang. 2020. Uranus: Simple, Efficient SGX Programming and Its Applications. In Proceedings of the 15th ACM Asia Conference on Computer and Communications Security. 826--840."},{"key":"e_1_2_1_36_1","volume-title":"Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 971--985","author":"Khandaker Mustakimur Rahman","year":"2020","unstructured":"Mustakimur Rahman Khandaker , Yueqiang Cheng , Zhi Wang , and Tao Wei . 2020 . COIN Attacks: On Insecurity of Enclave Untrusted Interfaces in SGX . In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 971--985 . Mustakimur Rahman Khandaker, Yueqiang Cheng, Zhi Wang, and Tao Wei. 2020. COIN Attacks: On Insecurity of Enclave Untrusted Interfaces in SGX. In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 971--985."},{"key":"e_1_2_1_37_1","volume-title":"Proceedings of the 14th EuroSys Conference","author":"Kim Taehoon","year":"2019","unstructured":"Taehoon Kim , Joongun Park , Jaewook Woo , Seungheun Jeon , and Jaehyuk Huh . 2019 . ShieldStore: Shielded In-Memory Key-Value Storage with SGX . In Proceedings of the 14th EuroSys Conference 2019. 1--15. Taehoon Kim, Joongun Park, Jaewook Woo, Seungheun Jeon, and Jaehyuk Huh. 2019. ShieldStore: Shielded In-Memory Key-Value Storage with SGX. In Proceedings of the 14th EuroSys Conference 2019. 1--15."},{"key":"e_1_2_1_38_1","volume-title":"Retrieved","author":"Lab UC","year":"2022","unstructured":"UC Berkeley RISE Lab . 2022 . Opaque Benchmarking . Retrieved June 30, 2022 from https:\/\/mc2-project.github.io\/opaque-sql-docs\/src\/benchmarking\/benchmarking.html UC Berkeley RISE Lab. 2022. Opaque Benchmarking. Retrieved June 30, 2022 from https:\/\/mc2-project.github.io\/opaque-sql-docs\/src\/benchmarking\/benchmarking.html"},{"key":"e_1_2_1_39_1","volume-title":"Retrieved","author":"Lab UC","year":"2022","unstructured":"UC Berkeley RISE Lab . 2022 . Supported Functionalities in Opaque . Retrieved June 30, 2022 from https:\/\/mc2-project.github.io\/opaque-sql-docs\/src\/usage\/functionality.html UC Berkeley RISE Lab. 2022. Supported Functionalities in Opaque. Retrieved June 30, 2022 from https:\/\/mc2-project.github.io\/opaque-sql-docs\/src\/usage\/functionality.html"},{"key":"e_1_2_1_40_1","volume-title":"SGX-PySpark: Secure Distributed Data Analytics. In The World Wide Web Conference. 3564--3563","author":"Quoc Do Le","year":"2019","unstructured":"Do Le Quoc , Franz Gregor , Jatinder Singh , and Christof Fetzer . 2019 . SGX-PySpark: Secure Distributed Data Analytics. In The World Wide Web Conference. 3564--3563 . Do Le Quoc, Franz Gregor, Jatinder Singh, and Christof Fetzer. 2019. SGX-PySpark: Secure Distributed Data Analytics. In The World Wide Web Conference. 3564--3563."},{"key":"e_1_2_1_41_1","volume-title":"Proceedings of the 26th USENIX security symposium (USENIX Security). 557--574","author":"Lee Sangho","year":"2017","unstructured":"Sangho Lee , Ming-Wei Shih , Prasun Gera , Taesoo Kim , Hyesoon Kim , and Marcus Peinado . 2017 . Inferring Fine-Grained Control Flow Inside SGX Enclaves with Branch Shadowing . In Proceedings of the 26th USENIX security symposium (USENIX Security). 557--574 . Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, and Marcus Peinado. 2017. Inferring Fine-Grained Control Flow Inside SGX Enclaves with Branch Shadowing. In Proceedings of the 26th USENIX security symposium (USENIX Security). 557--574."},{"key":"e_1_2_1_42_1","volume-title":"Proceedings of the 11th ACM SIGKDD International Conference on Knowledge Discovery in Data Mining (KDD). 177--187","author":"Leskovec Jure","year":"2005","unstructured":"Jure Leskovec , Jon Kleinberg , and Christos Faloutsos . 2005 . Graphs Over Time: Densification Laws, Shrinking Diameters and Possible Explanations . In Proceedings of the 11th ACM SIGKDD International Conference on Knowledge Discovery in Data Mining (KDD). 177--187 . Jure Leskovec, Jon Kleinberg, and Christos Faloutsos. 2005. Graphs Over Time: Densification Laws, Shrinking Diameters and Possible Explanations. In Proceedings of the 11th ACM SIGKDD International Conference on Knowledge Discovery in Data Mining (KDD). 177--187."},{"key":"e_1_2_1_43_1","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1080\/15427951.2009.10129177","article-title":"Community Structure in Large Networks: Natural Cluster Sizes and the Absence of Large Well-Defined Clusters","volume":"6","author":"Leskovec Jure","year":"2009","unstructured":"Jure Leskovec , Kevin J Lang , Anirban Dasgupta , and Michael W Mahoney . 2009 . Community Structure in Large Networks: Natural Cluster Sizes and the Absence of Large Well-Defined Clusters . Internet Mathematics 6 , 1 (2009), 29 -- 123 . Jure Leskovec, Kevin J Lang, Anirban Dasgupta, and Michael W Mahoney. 2009. Community Structure in Large Networks: Natural Cluster Sizes and the Absence of Large Well-Defined Clusters. Internet Mathematics 6, 1 (2009), 29--123.","journal-title":"Internet Mathematics"},{"key":"e_1_2_1_44_1","volume-title":"Proceedings of the 26th Symposium on Operating Systems Principles (SOSP). 234--251","author":"Levy Amit","year":"2017","unstructured":"Amit Levy , Bradford Campbell , Branden Ghena , Daniel B Giffin , Pat Pannuto , Prabal Dutta , and Philip Levis . 2017 . Multiprogramming a 64KB Computer Safely and Efficiently . In Proceedings of the 26th Symposium on Operating Systems Principles (SOSP). 234--251 . Amit Levy, Bradford Campbell, Branden Ghena, Daniel B Giffin, Pat Pannuto, Prabal Dutta, and Philip Levis. 2017. Multiprogramming a 64KB Computer Safely and Efficiently. In Proceedings of the 26th Symposium on Operating Systems Principles (SOSP). 234--251."},{"key":"e_1_2_1_45_1","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1145\/2775054.2694385","article-title":"Ghostrider: A Hardware-Software System for Memory Trace Oblivious Computation","volume":"50","author":"Liu Chang","year":"2015","unstructured":"Chang Liu , Austin Harris , Martin Maas , Michael Hicks , Mohit Tiwari , and Elaine Shi . 2015 . Ghostrider: A Hardware-Software System for Memory Trace Oblivious Computation . ACM SIGPLAN Notices 50 , 4 (2015), 87 -- 101 . Chang Liu, Austin Harris, Martin Maas, Michael Hicks, Mohit Tiwari, and Elaine Shi. 2015. Ghostrider: A Hardware-Software System for Memory Trace Oblivious Computation. ACM SIGPLAN Notices 50, 4 (2015), 87--101.","journal-title":"ACM SIGPLAN Notices"},{"key":"e_1_2_1_46_1","volume-title":"Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 359--376","author":"Liu Chang","year":"2015","unstructured":"Chang Liu , Xiao Shaun Wang , Kartik Nayak , Yan Huang , and Elaine Shi . 2015 . ObliVM: A Programming Framework for Secure Computation . In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 359--376 . Chang Liu, Xiao Shaun Wang, Kartik Nayak, Yan Huang, and Elaine Shi. 2015. ObliVM: A Programming Framework for Secure Computation. In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 359--376."},{"key":"e_1_2_1_47_1","volume-title":"Proceedings of the 24th USENIX Security Symposium (USENIX Security). 865--880","author":"Masti Ramya Jayaram","year":"2015","unstructured":"Ramya Jayaram Masti , Devendra Rai , Aanjhan Ranganathan , Christian M\u00fcller , Lothar Thiele , and Srdjan Capkun . 2015 . Thermal Covert Channels on Multi-Core Platforms . In Proceedings of the 24th USENIX Security Symposium (USENIX Security). 865--880 . Ramya Jayaram Masti, Devendra Rai, Aanjhan Ranganathan, Christian M\u00fcller, Lothar Thiele, and Srdjan Capkun. 2015. Thermal Covert Channels on Multi-Core Platforms. In Proceedings of the 24th USENIX Security Symposium (USENIX Security). 865--880."},{"key":"e_1_2_1_48_1","volume-title":"Proceedings of the 25th International Conference on Neural Information Processing Systems (NIPS)","volume":"1","author":"McAuley Julian","year":"2012","unstructured":"Julian McAuley and Jure Leskovec . 2012 . Learning to Discover Social Circles in Ego Networks . In Proceedings of the 25th International Conference on Neural Information Processing Systems (NIPS) , Vol. 1 . 539--547. Julian McAuley and Jure Leskovec. 2012. Learning to Discover Social Circles in Ego Networks. In Proceedings of the 25th International Conference on Neural Information Processing Systems (NIPS), Vol. 1. 539--547."},{"key":"e_1_2_1_49_1","volume-title":"Proceedings of the Hardware and Architectural Support for Security and Privacy","author":"McKeen Frank","year":"2016","unstructured":"Frank McKeen , Ilya Alexandrovich , Ittai Anati , Dror Caspi , Simon Johnson , Rebekah Leslie-Hurd , and Carlos Rozas . 2016 . Intel Software Guard Extensions (Intel SGX) Software Support for Dynamic Memory Allocation inside an Enclave . In Proceedings of the Hardware and Architectural Support for Security and Privacy 2016. 1--9. Frank McKeen, Ilya Alexandrovich, Ittai Anati, Dror Caspi, Simon Johnson, Rebekah Leslie-Hurd, and Carlos Rozas. 2016. Intel Software Guard Extensions (Intel SGX) Software Support for Dynamic Memory Allocation inside an Enclave. In Proceedings of the Hardware and Architectural Support for Security and Privacy 2016. 1--9."},{"key":"e_1_2_1_50_1","volume-title":"Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy.","author":"McKeen Frank","year":"2013","unstructured":"Frank McKeen , Ilya Alexandrovich , Alex Berenzon , Carlos V Rozas , Hisham Shafi , Vedvyas Shanbhogue , and Uday R Savagaonkar . 2013 . Innovative Instructions and Software Model for Isolated Execution . In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy. Frank McKeen, Ilya Alexandrovich, Alex Berenzon, Carlos V Rozas, Hisham Shafi, Vedvyas Shanbhogue, and Uday R Savagaonkar. 2013. Innovative Instructions and Software Model for Isolated Execution. In Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy."},{"key":"e_1_2_1_51_1","volume-title":"Proceedings of the IEEE 35th International Conference on Data Engineering (ICDE). 650--661","author":"Mehrotra Sharad","year":"2019","unstructured":"Sharad Mehrotra , Shantanu Sharma , Jeffrey Ullman , and Anurag Mishra . 2019 . Partitioned Data Security on Outsourced Sensitive and Non-Sensitive Data . In Proceedings of the IEEE 35th International Conference on Data Engineering (ICDE). 650--661 . Sharad Mehrotra, Shantanu Sharma, Jeffrey Ullman, and Anurag Mishra. 2019. Partitioned Data Security on Outsourced Sensitive and Non-Sensitive Data. In Proceedings of the IEEE 35th International Conference on Data Engineering (ICDE). 650--661."},{"key":"e_1_2_1_52_1","volume-title":"Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 279--296","author":"Mishra Pratyush","year":"2018","unstructured":"Pratyush Mishra , Rishabh Poddar , Jerry Chen , Alessandro Chiesa , and Raluca Ada Popa . 2018 . Oblix: An Efficient Oblivious Search Index . In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 279--296 . Pratyush Mishra, Rishabh Poddar, Jerry Chen, Alessandro Chiesa, and Raluca Ada Popa. 2018. Oblix: An Efficient Oblivious Search Index. In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 279--296."},{"key":"e_1_2_1_53_1","doi-asserted-by":"crossref","first-page":"2","DOI":"10.1109\/TC.1979.1675216","article-title":"Bitonic Sort on a Mesh-Connected Parallel Computer","volume":"28","author":"Nassimi David","year":"1979","unstructured":"David Nassimi and Sartaj Sahni . 1979 . Bitonic Sort on a Mesh-Connected Parallel Computer . IEEE Trans. Comput. 28 , 01 (1979), 2 -- 7 . David Nassimi and Sartaj Sahni. 1979. Bitonic Sort on a Mesh-Connected Parallel Computer. IEEE Trans. Comput. 28, 01 (1979), 2--7.","journal-title":"IEEE Trans. Comput."},{"key":"e_1_2_1_54_1","volume-title":"Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 377--394","author":"Nayak Kartik","year":"2015","unstructured":"Kartik Nayak , Xiao Shaun Wang , Stratis Ioannidis , Udi Weinsberg , Nina Taft , and Elaine Shi . 2015 . GraphSC: Parallel Secure Computation Made Easy . In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 377--394 . Kartik Nayak, Xiao Shaun Wang, Stratis Ioannidis, Udi Weinsberg, Nina Taft, and Elaine Shi. 2015. GraphSC: Parallel Secure Computation Made Easy. In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 377--394."},{"key":"e_1_2_1_55_1","volume-title":"Proceedings of the 2015 ACM SIGMOD International Conference on Management of Data (SIGMOD). 153--166","author":"Oktay Kerim Yasin","year":"2015","unstructured":"Kerim Yasin Oktay , Sharad Mehrotra , Vaibhav Khadilkar , and Murat Kantarcioglu . 2015 . SEMROD: Secure and Efficient MapReduce over Hybrid Clouds . In Proceedings of the 2015 ACM SIGMOD International Conference on Management of Data (SIGMOD). 153--166 . Kerim Yasin Oktay, Sharad Mehrotra, Vaibhav Khadilkar, and Murat Kantarcioglu. 2015. SEMROD: Secure and Efficient MapReduce over Hybrid Clouds. In Proceedings of the 2015 ACM SIGMOD International Conference on Management of Data (SIGMOD). 153--166."},{"key":"e_1_2_1_56_1","volume-title":"SGX-LKL: Securing the Host OS Interface for Trusted Execution. arXiv preprint arXiv:1908.11143","author":"Priebe Christian","year":"2019","unstructured":"Christian Priebe , Divya Muthukumaran , Joshua Lind , Huanzhou Zhu , Shujie Cui , Vasily A Sartakov , and Peter Pietzuch . 2019. SGX-LKL: Securing the Host OS Interface for Trusted Execution. arXiv preprint arXiv:1908.11143 ( 2019 ). Christian Priebe, Divya Muthukumaran, Joshua Lind, Huanzhou Zhu, Shujie Cui, Vasily A Sartakov, and Peter Pietzuch. 2019. SGX-LKL: Securing the Host OS Interface for Trusted Execution. arXiv preprint arXiv:1908.11143 (2019)."},{"key":"e_1_2_1_57_1","volume-title":"Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 264--278","author":"Priebe Christian","year":"2018","unstructured":"Christian Priebe , Kapil Vaswani , and Manuel Costa . 2018 . EnclaveDB: A Secure Database Using SGX . In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 264--278 . Christian Priebe, Kapil Vaswani, and Manuel Costa. 2018. EnclaveDB: A Secure Database Using SGX. In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 264--278."},{"key":"e_1_2_1_58_1","first-page":"997","article-title":"Ring ORAM: Closing the Gap Between Small and Large Client Storage Oblivious RAM","volume":"2014","author":"Ren Ling","year":"2014","unstructured":"Ling Ren , Christopher W Fletcher , Albert Kwon , Emil Stefanov , Elaine Shi , Marten van Dijk , and Srinivas Devadas . 2014 . Ring ORAM: Closing the Gap Between Small and Large Client Storage Oblivious RAM . IACR Cryptol. ePrint Arch. 2014 (2014), 997 . Ling Ren, Christopher W Fletcher, Albert Kwon, Emil Stefanov, Elaine Shi, Marten van Dijk, and Srinivas Devadas. 2014. Ring ORAM: Closing the Gap Between Small and Large Client Storage Oblivious RAM. IACR Cryptol. ePrint Arch. 2014 (2014), 997.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_2_1_59_1","unstructured":"Marcelo Rosa and Keiko Fonseca. [n.d.]. Specification and Implementation of Reusable Secure Microservices D3. 2.  Marcelo Rosa and Keiko Fonseca. [n.d.]. Specification and Implementation of Reusable Secure Microservices D3. 2."},{"key":"e_1_2_1_60_1","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1109\/JSAC.2002.806121","article-title":"Language-Based Information-Flow Security","volume":"21","author":"Sabelfeld Andrei","year":"2003","unstructured":"Andrei Sabelfeld and Andrew C Myers . 2003 . Language-Based Information-Flow Security . IEEE Journal on Selected Areas in Communications 21 , 1 (2003), 5 -- 19 . Andrei Sabelfeld and Andrew C Myers. 2003. Language-Based Information-Flow Security. IEEE Journal on Selected Areas in Communications 21, 1 (2003), 5--19.","journal-title":"IEEE Journal on Selected Areas in Communications"},{"key":"e_1_2_1_61_1","volume-title":"Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 35--52","author":"Sanchez Vicarte Jose Rodrigo","year":"2020","unstructured":"Jose Rodrigo Sanchez Vicarte , Benjamin Schreiber , Riccardo Paccagnella , and Christopher W Fletcher . 2020 . Game of Threads: Enabling Asynchronous Poisoning Attacks . In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 35--52 . Jose Rodrigo Sanchez Vicarte, Benjamin Schreiber, Riccardo Paccagnella, and Christopher W Fletcher. 2020. Game of Threads: Enabling Asynchronous Poisoning Attacks. In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 35--52."},{"key":"e_1_2_1_62_1","volume-title":"Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS).","author":"Sasy Sajin","unstructured":"Sajin Sasy , Sergey Gorbunov , and Christopher W. Fletcher . 2018. ZeroTrace: Oblivious Memory Primitives from Intel SGX . In Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS). Sajin Sasy, Sergey Gorbunov, and Christopher W. Fletcher. 2018. ZeroTrace: Oblivious Memory Primitives from Intel SGX. In Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_2_1_63_1","volume-title":"Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 38--54","author":"Schuster Felix","year":"2015","unstructured":"Felix Schuster , Manuel Costa , C\u00e9dric Fournet , Christos Gkantsidis , Marcus Peinado , Gloria Mainar-Ruiz , and Mark Russinovich . 2015 . VC3: Trustworthy Data Analytics in the Cloud Using SGX . In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 38--54 . Felix Schuster, Manuel Costa, C\u00e9dric Fournet, Christos Gkantsidis, Marcus Peinado, Gloria Mainar-Ruiz, and Mark Russinovich. 2015. VC3: Trustworthy Data Analytics in the Cloud Using SGX. In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 38--54."},{"key":"e_1_2_1_64_1","volume-title":"Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. 3--24","author":"Schwarz Michael","year":"2017","unstructured":"Michael Schwarz , Samuel Weiser , Daniel Gruss , Cl\u00e9mentine Maurice , and Stefan Mangard . 2017 . Malware Guard Extension: Using SGX to Conceal Cache Attacks . In Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. 3--24 . Michael Schwarz, Samuel Weiser, Daniel Gruss, Cl\u00e9mentine Maurice, and Stefan Mangard. 2017. Malware Guard Extension: Using SGX to Conceal Cache Attacks. In Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. 3--24."},{"key":"e_1_2_1_65_1","volume-title":"Vega. Retrieved","author":"Raja","year":"2022","unstructured":"Raja Sekar et al. [n.d.] . Vega. Retrieved June 30, 2022 from https:\/\/github.com\/rajasekarv\/vega Raja Sekar et al. [n.d.]. Vega. Retrieved June 30, 2022 from https:\/\/github.com\/rajasekarv\/vega"},{"key":"e_1_2_1_66_1","volume-title":"White Paper","author":"AMD","year":"2020","unstructured":"AMD SEV-SNP. 2020 . Strengthening VM Isolation with Integrity Protection and More . White Paper , January (2020). AMD SEV-SNP. 2020. Strengthening VM Isolation with Integrity Protection and More. White Paper, January (2020)."},{"key":"e_1_2_1_67_1","volume-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 1211--1228","author":"Shaon Fahad","year":"2017","unstructured":"Fahad Shaon , Murat Kantarcioglu , Zhiqiang Lin , and Latifur Khan . 2017 . SGX-BigMatrix: A Practical Encrypted Data Analytic Framework with Trusted Processors . In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 1211--1228 . Fahad Shaon, Murat Kantarcioglu, Zhiqiang Lin, and Latifur Khan. 2017. SGX-BigMatrix: A Practical Encrypted Data Analytic Framework with Trusted Processors. In Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS). 1211--1228."},{"key":"e_1_2_1_68_1","volume-title":"Proceedings of the 9th Asia-Pacific Workshop on Systems. 1--8.","author":"Shen Youren","year":"2018","unstructured":"Youren Shen , Yu Chen , Kang Chen , Hongliang Tian , and Shoumeng Yan . 2018 . To Isolate, or to Share? That Is a Question for Intel SGX . In Proceedings of the 9th Asia-Pacific Workshop on Systems. 1--8. Youren Shen, Yu Chen, Kang Chen, Hongliang Tian, and Shoumeng Yan. 2018. To Isolate, or to Share? That Is a Question for Intel SGX. In Proceedings of the 9th Asia-Pacific Workshop on Systems. 1--8."},{"key":"e_1_2_1_69_1","volume-title":"Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 955--970","author":"Shen Youren","year":"2020","unstructured":"Youren Shen , Hongliang Tian , Yu Chen , Kang Chen , Runji Wang , Yi Xu , Yubin Xia , and Shoumeng Yan . 2020 . Occlum: Secure and Efficient Multitasking inside a Single Enclave of Intel SGX . In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 955--970 . Youren Shen, Hongliang Tian, Yu Chen, Kang Chen, Runji Wang, Yi Xu, Yubin Xia, and Shoumeng Yan. 2020. Occlum: Secure and Efficient Multitasking inside a Single Enclave of Intel SGX. In Proceedings of the 25th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 955--970."},{"key":"e_1_2_1_70_1","volume-title":"Proceedings of the 24th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 121--135","author":"Shen Zhiming","year":"2019","unstructured":"Zhiming Shen , Zhen Sun , Gur-Eyal Sela , Eugene Bagdasaryan , Christina Delimitrou , Robbert Van Renesse , and Hakim Weatherspoon . 2019 . X-Containers: Breaking Down Barriers to Improve Performance and Isolation of Cloud-Native Containers . In Proceedings of the 24th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 121--135 . Zhiming Shen, Zhen Sun, Gur-Eyal Sela, Eugene Bagdasaryan, Christina Delimitrou, Robbert Van Renesse, and Hakim Weatherspoon. 2019. X-Containers: Breaking Down Barriers to Improve Performance and Isolation of Cloud-Native Containers. In Proceedings of the 24th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS). 121--135."},{"key":"e_1_2_1_71_1","volume-title":"Proceedings of the 24th Annual Network and Distributed System Security Symposium (NDSS).","author":"Shih Ming-Wei","year":"2017","unstructured":"Ming-Wei Shih , Sangho Lee , Taesoo Kim , and Marcus Peinado . 2017 . T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs . In Proceedings of the 24th Annual Network and Distributed System Security Symposium (NDSS). Ming-Wei Shih, Sangho Lee, Taesoo Kim, and Marcus Peinado. 2017. T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs. In Proceedings of the 24th Annual Network and Distributed System Security Symposium (NDSS)."},{"key":"e_1_2_1_72_1","first-page":"251","article-title":"VeritasDB: High Throughput Key-Value Store with Integrity","volume":"2018","author":"Sinha Rohit","year":"2018","unstructured":"Rohit Sinha and Mihai Christodorescu . 2018 . VeritasDB: High Throughput Key-Value Store with Integrity . IACR Cryptol. ePrint Arch. 2018 (2018), 251 . Rohit Sinha and Mihai Christodorescu. 2018. VeritasDB: High Throughput Key-Value Store with Integrity. IACR Cryptol. ePrint Arch. 2018 (2018), 251.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_2_1_73_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3177872","article-title":"Path ORAM: An Extremely Simple Oblivious RAM Protocol","volume":"65","author":"Stefanov Emil","year":"2018","unstructured":"Emil Stefanov , Marten Van Dijk , Elaine Shi , T-H Hubert Chan , Christopher Fletcher , Ling Ren , Xiangyao Yu , and Srinivas Devadas . 2018 . Path ORAM: An Extremely Simple Oblivious RAM Protocol . Journal of the ACM (JACM) 65 , 4 (2018), 1 -- 26 . Emil Stefanov, Marten Van Dijk, Elaine Shi, T-H Hubert Chan, Christopher Fletcher, Ling Ren, Xiangyao Yu, and Srinivas Devadas. 2018. Path ORAM: An Extremely Simple Oblivious RAM Protocol. Journal of the ACM (JACM) 65, 4 (2018), 1--26.","journal-title":"Journal of the ACM (JACM)"},{"key":"e_1_2_1_74_1","volume-title":"Proceedings of the 9th ACM Conference on Data and Application Security and Privacy. 255--266","author":"Tian Dave","year":"2019","unstructured":"Dave Tian , Joseph I Choi , Grant Hernandez , Patrick Traynor , and Kevin RB Butler . 2019 . A Practical Intel SGX Setting for Linux Containers in the Cloud . In Proceedings of the 9th ACM Conference on Data and Application Security and Privacy. 255--266 . Dave Tian, Joseph I Choi, Grant Hernandez, Patrick Traynor, and Kevin RB Butler. 2019. A Practical Intel SGX Setting for Linux Containers in the Cloud. In Proceedings of the 9th ACM Conference on Data and Application Security and Privacy. 255--266."},{"key":"e_1_2_1_75_1","volume-title":"Proceedings of the 2017 USENIX Annual Technical Conference (USENIX ATC). 645--658","author":"Tsai Chia-Che","year":"2017","unstructured":"Chia-Che Tsai , Donald E Porter , and Mona Vij . 2017 . Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX . In Proceedings of the 2017 USENIX Annual Technical Conference (USENIX ATC). 645--658 . Chia-Che Tsai, Donald E Porter, and Mona Vij. 2017. Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In Proceedings of the 2017 USENIX Annual Technical Conference (USENIX ATC). 645--658."},{"key":"e_1_2_1_76_1","unstructured":"Stefan K\u00f6psell TUD. [n.d.]. Integrated Implementation of the Micro-Services for Distributed Big Data Applications D4. 4.  Stefan K\u00f6psell TUD. [n.d.]. Integrated Implementation of the Micro-Services for Distributed Big Data Applications D4. 4."},{"key":"e_1_2_1_77_1","volume-title":"Proceedings of the 26th USENIX Security Symposium (USENIX Security). 1041--1056","author":"Bulck Jo Van","year":"2017","unstructured":"Jo Van Bulck , Nico Weichbrodt , R\u00fcdiger Kapitza , Frank Piessens , and Raoul Strackx . 2017 . Telling Your Secrets without Page Faults: Stealthy Page Table-Based Attacks on Enclaved Execution . In Proceedings of the 26th USENIX Security Symposium (USENIX Security). 1041--1056 . Jo Van Bulck, Nico Weichbrodt, R\u00fcdiger Kapitza, Frank Piessens, and Raoul Strackx. 2017. Telling Your Secrets without Page Faults: Stealthy Page Table-Based Attacks on Enclaved Execution. In Proceedings of the 26th USENIX Security Symposium (USENIX Security). 1041--1056."},{"key":"e_1_2_1_78_1","volume-title":"Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2333--2350","author":"Wang Huibo","year":"2019","unstructured":"Huibo Wang , Pei Wang , Yu Ding , Mingshen Sun , Yiming Jing , Ran Duan , Long Li , Yulong Zhang , Tao Wei , and Zhiqiang Lin . 2019 . Towards Memory Safe Enclave Programming with Rust-SGX . In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2333--2350 . Huibo Wang, Pei Wang, Yu Ding, Mingshen Sun, Yiming Jing, Ran Duan, Long Li, Yulong Zhang, Tao Wei, and Zhiqiang Lin. 2019. Towards Memory Safe Enclave Programming with Rust-SGX. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS). 2333--2350."},{"key":"e_1_2_1_79_1","volume-title":"Proceedings of the 19th International Middleware Conference (Middleware). 201--213","author":"Weichbrodt Nico","year":"2018","unstructured":"Nico Weichbrodt , Pierre-Louis Aublin , and R\u00fcdiger Kapitza . 2018 . SGX-Perf: A Performance Analysis Tool for Intel SGX Enclaves . In Proceedings of the 19th International Middleware Conference (Middleware). 201--213 . Nico Weichbrodt, Pierre-Louis Aublin, and R\u00fcdiger Kapitza. 2018. SGX-Perf: A Performance Analysis Tool for Intel SGX Enclaves. In Proceedings of the 19th International Middleware Conference (Middleware). 201--213."},{"key":"e_1_2_1_80_1","volume-title":"Proceedings of the European Symposium on Research in Computer Security. 440--457","author":"Weichbrodt Nico","year":"2016","unstructured":"Nico Weichbrodt , Anil Kurmus , Peter Pietzuch , and R\u00fcdiger Kapitza . 2016 . Async-Shock: Exploiting Synchronisation Bugs in Intel SGX Enclaves . In Proceedings of the European Symposium on Research in Computer Security. 440--457 . Nico Weichbrodt, Anil Kurmus, Peter Pietzuch, and R\u00fcdiger Kapitza. 2016. Async-Shock: Exploiting Synchronisation Bugs in Intel SGX Enclaves. In Proceedings of the European Symposium on Research in Computer Security. 440--457."},{"key":"e_1_2_1_81_1","volume-title":"Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis. 15--26","author":"Wu Meng","year":"2018","unstructured":"Meng Wu , Shengjian Guo , Patrick Schaumont , and Chao Wang . 2018 . Eliminating Timing Side-Channel Leaks Using Program Repair . In Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis. 15--26 . Meng Wu, Shengjian Guo, Patrick Schaumont, and Chao Wang. 2018. Eliminating Timing Side-Channel Leaks Using Program Repair. In Proceedings of the 27th ACM SIGSOFT International Symposium on Software Testing and Analysis. 15--26."},{"key":"e_1_2_1_82_1","volume-title":"Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 640--656","author":"Xu Yuanzhong","year":"2015","unstructured":"Yuanzhong Xu , Weidong Cui , and Marcus Peinado . 2015 . Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems . In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 640--656 . Yuanzhong Xu, Weidong Cui, and Marcus Peinado. 2015. Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems. In Proceedings of the 2015 IEEE Symposium on Security and Privacy (SP). 640--656."},{"key":"e_1_2_1_83_1","volume-title":"Proceedings of the 27th Annual Symposium on Foundations of Computer Science (SFCS). 162--167","author":"Chi-Chih Yao Andrew","year":"1986","unstructured":"Andrew Chi-Chih Yao . 1986 . How to Generate and Exchange Secrets . In Proceedings of the 27th Annual Symposium on Foundations of Computer Science (SFCS). 162--167 . Andrew Chi-Chih Yao. 1986. How to Generate and Exchange Secrets. In Proceedings of the 27th Annual Symposium on Foundations of Computer Science (SFCS). 162--167."},{"key":"e_1_2_1_84_1","volume-title":"Proceedings of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 15--28","author":"Zaharia Matei","year":"2012","unstructured":"Matei Zaharia , Mosharaf Chowdhury , Tathagata Das , Ankur Dave , Justin Ma , Murphy McCauly , Michael J Franklin , Scott Shenker , and Ion Stoica . 2012 . Resilient Distributed Datasets: A Fault-Tolerant Abstraction for In-Memory Cluster Computing . In Proceedings of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 15--28 . Matei Zaharia, Mosharaf Chowdhury, Tathagata Das, Ankur Dave, Justin Ma, Murphy McCauly, Michael J Franklin, Scott Shenker, and Ion Stoica. 2012. Resilient Distributed Datasets: A Fault-Tolerant Abstraction for In-Memory Cluster Computing. In Proceedings of the 9th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 15--28."},{"key":"e_1_2_1_85_1","volume-title":"Proceedings of the 18th ACM SIGSAC Conference on Computer and Communications Security (CCS). 515--526","author":"Zhang Kehuan","year":"2011","unstructured":"Kehuan Zhang , Xiaoyong Zhou , Yangyi Chen , XiaoFeng Wang , and Yaoping Ruan . 2011 . Sedic: Privacy-Aware Data Intensive Computing on Hybrid Clouds . In Proceedings of the 18th ACM SIGSAC Conference on Computer and Communications Security (CCS). 515--526 . Kehuan Zhang, Xiaoyong Zhou, Yangyi Chen, XiaoFeng Wang, and Yaoping Ruan. 2011. Sedic: Privacy-Aware Data Intensive Computing on Hybrid Clouds. In Proceedings of the 18th ACM SIGSAC Conference on Computer and Communications Security (CCS). 515--526."},{"key":"e_1_2_1_86_1","volume-title":"Proceedings of the 13th web information systems and applications conference (WISA). 184--187","author":"Zhao ChongChong","year":"2016","unstructured":"ChongChong Zhao , Daniyaer Saifuding , Hongliang Tian , Yong Zhang , and ChunXiao Xing . 2016 . On the Performance of Intel SGX . In Proceedings of the 13th web information systems and applications conference (WISA). 184--187 . ChongChong Zhao, Daniyaer Saifuding, Hongliang Tian, Yong Zhang, and ChunXiao Xing. 2016. On the Performance of Intel SGX. In Proceedings of the 13th web information systems and applications conference (WISA). 184--187."},{"key":"e_1_2_1_87_1","volume-title":"Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 229--244","author":"Zhao Mark","unstructured":"Mark Zhao and G. Edward Suh . 2018. FPGA-Based Remote Power Side-Channel Attacks . In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 229--244 . Mark Zhao and G. Edward Suh. 2018. FPGA-Based Remote Power Side-Channel Attacks. In Proceedings of the 2018 IEEE Symposium on Security and Privacy (SP). 229--244."},{"key":"e_1_2_1_88_1","volume-title":"Proceedings of 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 283--298","author":"Zheng Wenting","year":"2017","unstructured":"Wenting Zheng , Ankur Dave , Jethro G Beekman , Raluca Ada Popa , Joseph E Gonzalez , and Ion Stoica . 2017 . Opaque: An Oblivious and Encrypted Distributed Analytics Platform . In Proceedings of 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 283--298 . Wenting Zheng, Ankur Dave, Jethro G Beekman, Raluca Ada Popa, Joseph E Gonzalez, and Ion Stoica. 2017. Opaque: An Oblivious and Encrypted Distributed Analytics Platform. In Proceedings of 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI). 283--298."}],"container-title":["Proceedings of the VLDB Endowment"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.14778\/3583140.3583158","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,20]],"date-time":"2023-04-20T16:47:19Z","timestamp":1682009239000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.14778\/3583140.3583158"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,2]]},"references-count":87,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2023,2]]}},"alternative-id":["10.14778\/3583140.3583158"],"URL":"https:\/\/doi.org\/10.14778\/3583140.3583158","relation":{},"ISSN":["2150-8097"],"issn-type":[{"value":"2150-8097","type":"print"}],"subject":[],"published":{"date-parts":[[2023,2]]},"assertion":[{"value":"2023-04-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}