{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T10:37:50Z","timestamp":1791455870412,"version":"4.3.4"},"reference-count":79,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2025,1,13]],"date-time":"2025-01-13T00:00:00Z","timestamp":1736726400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key Research and Development Program of China","award":["2023YFB4503000"],"award-info":[{"award-number":["2023YFB4503000"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Future Internet"],"abstract":"<jats:p>With the extensive deployment and application of the Internet of Things (IoT), 5G and 6G technologies and edge intelligence, the volume of data generated by IoT and the number of intelligence applications derived from these data are rapidly growing. However, the absence of effective mechanisms to safeguard the vast data generated by IoT, along with the security and privacy of edge intelligence applications, hinders their further development and adoption. In recent years, Trusted Execution Environment (TEE) has emerged as a promising technology for securing cloud data storage and cloud processing, demonstrating significant potential for ensuring data and application confidentiality in more scenarios. Nevertheless, applying TEE technology to enhance security in IoT and edge intelligence scenarios still presents several challenges. This paper investigates the technical challenges faced by current TEE solutions, such as performance overhead and I\/O security issues, in the context of the resource constraints and data mobility that are inherent to IoT and edge intelligence applications. Using Intel Software Guard Extensions (SGX) technology as a case study, this paper validates these challenges through extensive experiments. The results provide critical assessments and analyses essential for advancing the development and usage of TEE in IoT and edge intelligence scenarios.<\/jats:p>","DOI":"10.3390\/fi17010032","type":"journal-article","created":{"date-parts":[[2025,1,13]],"date-time":"2025-01-13T09:49:17Z","timestamp":1736761757000},"page":"32","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Analysis and Evaluation of Intel Software Guard Extension-Based Trusted Execution Environment Usage in Edge Intelligence and Internet of Things Scenarios"],"prefix":"10.3390","volume":"17","author":[{"given":"Zhiyuan","family":"Wang","sequence":"first","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing 100084, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1850-3007","authenticated-orcid":false,"given":"Yuezhi","family":"Zhou","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Tsinghua University, Beijing 100084, China"},{"name":"Zhongguancun Laboratory, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,1,13]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","article-title":"The Internet of Things: A survey","volume":"54","author":"Atzori","year":"2010","journal-title":"Comput. Netw."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Al-Ansi, A., Al-Ansi, A.M., Muthanna, A., Elgendy, I.A., and Koucheryavy, A. (2021). Survey on Intelligence Edge Computing in 6G: Characteristics, Challenges, Potential Use Cases, and Market Drivers. Future Internet, 13.","DOI":"10.3390\/fi13050118"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Zikria, Y.B., Ali, R., Afzal, M.K., and Kim, S.W. (2021). Next-Generation Internet of Things (IoT): Opportunities, Challenges, and Solutions. Sensors, 21.","DOI":"10.3390\/s21041174"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Han, J., Zhang, Y., Liu, J., Li, Z., Xian, M., Wang, H., Mao, F., and Chen, Y. (2022). A Blockchain-Based and SGX-Enabled Access Control Framework for IoT. Electronics, 11.","DOI":"10.3390\/electronics11172710"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Samuel, S.S.I. (2016, January 15\u201316). A review of connectivity challenges in IoT-smart home. Proceedings of the 2016 3rd MEC International Conference on Big Data and Smart City (ICBDSC), Muscat, Oman.","DOI":"10.1109\/ICBDSC.2016.7460395"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"103164","DOI":"10.1016\/j.jnca.2021.103164","article-title":"A systematic review of IoT in healthcare: Applications, techniques, and trends","volume":"192","author":"Madanipour","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1007\/s42452-019-1925-y","article-title":"Challenges and opportunities in IoT healthcare systems: A systematic review","volume":"2","author":"Selvaraj","year":"2019","journal-title":"SN Appl. Sci."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Kalsoom, T., Ahmed, S., Rafi-ul Shan, P.M., Azmat, M., Akhtar, P., Pervez, Z., Imran, M.A., and Ur-Rehman, M. (2021). Impact of IoT on Manufacturing Industry 4.0: A New Triangular Systematic Review. Sustainability, 13.","DOI":"10.3390\/su132212506"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Trakadas, P., Simoens, P., Gkonis, P., Sarakis, L., Angelopoulos, A., Ramallo-Gonz\u00e1lez, A.P., Skarmeta, A., Trochoutsos, C., Calvo, D., and Pariente, T. (2020). An artificial intelligence-based collaboration approach in industrial iot manufacturing: Key concepts, architectural extensions and potential applications. Sensors, 20.","DOI":"10.3390\/s20195480"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Zantalis, F., Koulouras, G., Karabetsos, S., and Kandris, D. (2019). A Review of Machine Learning and IoT in Smart Transportation. Future Internet, 11.","DOI":"10.3390\/fi11040094"},{"key":"ref_11","unstructured":"Balas, V.E., Solanki, V.K., Kumar, R., and Khari, M. (2019). IoT Based Intelligent Transportation System (IoT-ITS) for Global Perspective: A Case Study. Internet of Things and Big Data Analytics for Smart Generation, Springer International Publishing."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"1686","DOI":"10.1109\/COMST.2020.2986444","article-title":"Machine Learning in IoT Security: Current Solutions and Future Challenges","volume":"22","author":"Hussain","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Gkonis, P., Giannopoulos, A., Trakadas, P., Masip-Bruin, X., and D\u2019Andria, F. (2023). A Survey on IoT-Edge-Cloud Continuum Systems: Status, Challenges, Use Cases, and Open Issues. Future Internet, 15.","DOI":"10.20944\/preprints202311.0532.v1"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Panigrahi, C.R., Pati, B., Mohapatra, P., Buyya, R., and Li, K.C. (2021). IoT Security, Challenges, and Solutions: A Review. Progress in Advanced Computing and Intelligent Engineering, Springer.","DOI":"10.1007\/978-981-15-6353-9"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Sabt, M., Achemlal, M., and Bouabdallah, A. (2015, January 20\u201322). Trusted Execution Environment: What It is, and What It is Not. Proceedings of the 2015 IEEE Trustcom\/BigDataSE\/ISPA, Helsinki, Finland.","DOI":"10.1109\/Trustcom.2015.357"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"100543","DOI":"10.1016\/j.iot.2022.100543","article-title":"Confidential computing in cloud\/fog-based Internet of Things scenarios","volume":"19","author":"Valadares","year":"2022","journal-title":"Internet Things"},{"key":"ref_17","first-page":"1450","article-title":"Strengthening VM isolation with integrity protection and more","volume":"53","year":"2020","journal-title":"White Pap. January"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"130:1","DOI":"10.1145\/3291047","article-title":"Demystifying Arm TrustZone: A Comprehensive Survey","volume":"51","author":"Pinto","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"ref_19","unstructured":"Feng, E., Lu, X., Du, D., Yang, B., Jiang, X., Xia, Y., Zang, B., and Chen, H. (2021, January 14\u201316). Scalable memory protection in the PENGLAI enclave. Proceedings of the 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI 21), Online."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Hoekstra, M., Lal, R., Pappachan, P., Phegade, V., and Del Cuvillo, J. (2013, January 23\u201324). Using innovative instructions to create trustworthy software solutions. Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy, Tel-Aviv, Israel.","DOI":"10.1145\/2487726.2488370"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Will, N.C., Gomes Valadares, D.C., De Souza Santos, D.F., and Perkusich, A. (2021, January 23\u201325). Intel Software Guard Extensions in Internet of Things Scenarios: A Systematic Mapping Study. Proceedings of the 2021 8th International Conference on Future Internet of Things and Cloud (FiCloud), Rome, Italy.","DOI":"10.1109\/FiCloud49777.2021.00056"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"1830","DOI":"10.1109\/TIFS.2018.2885287","article-title":"Towards Efficient Fine-Grained Access Control and Trustworthy Data Processing for Remote Monitoring Services in IoT","volume":"14","author":"Chen","year":"2019","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Ayoade, G., Karande, V., Khan, L., and Hamlen, K. (2018, January 6\u20139). Decentralized IoT Data Management Using BlockChain and Trusted Execution Environment. Proceedings of the 2018 IEEE International Conference on Information Reuse and Integration (IRI), Salt Lake City, UT, USA.","DOI":"10.1109\/IRI.2018.00011"},{"key":"ref_24","unstructured":"Nilsson, A., Bideh, P.N., and Brorsson, J. (2020). A Survey of Published Attacks on Intel SGX. arXiv."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"G\u00f6tzfried, J., Eckert, M., Schinzel, S., and M\u00fcller, T. (2017, January 23\u201326). Cache Attacks on Intel SGX. Proceedings of the 10th European Workshop on Systems Security, New York, NY, USA. EuroSec\u201917.","DOI":"10.1145\/3065913.3065915"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Van Bulck, J., Piessens, F., and Strackx, R. (2017, January 28). SGX-Step: A Practical Attack Framework for Precise Enclave Execution Control. Proceedings of the 2nd Workshop on System Software for Trusted Execution, Shanghai, China.","DOI":"10.1145\/3152701.3152706"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Dhar, A., Ulqinaku, E., Kostiainen, K., and Capkun, S. (2024, September 10). ProtectIOn: Root-of-Trust for IO in Compromised Platforms. Cryptology ePrint Archive. Available online: https:\/\/eprint.iacr.org\/2019\/869.","DOI":"10.14722\/ndss.2020.24112"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1145\/3140659.3080208","article-title":"Regaining Lost Cycles with HotCalls: A Fast Interface for SGX Secure Enclaves","volume":"45","author":"Weisse","year":"2017","journal-title":"SIGARCH Comput. Archit. News"},{"key":"ref_29","first-page":"1","article-title":"Supporting third party attestation for Intel SGX with Intel data center attestation primitives","volume":"12","author":"Scarlata","year":"2018","journal-title":"White Pap."},{"key":"ref_30","first-page":"5:1","article-title":"Everything You Should Know About Intel SGX Performance on Virtualized Systems","volume":"3","author":"Bui","year":"2019","journal-title":"Proc. ACM Meas. Anal. Comput. Syst."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Zhao, C., Saifuding, D., Tian, H., Zhang, Y., and Xing, C. (2016, January 23\u201325). On the Performance of Intel SGX. Proceedings of the 2016 13th Web Information Systems and Applications Conference (WISA), Wuhan, China.","DOI":"10.1109\/WISA.2016.45"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Hasan, A., Riley, R., and Ponomarev, D. (2020, January 27\u201330). Port or Shim? Stress Testing Application Performance on Intel SGX. Proceedings of the 2020 IEEE International Symposium on Workload Characterization (IISWC), Beijing, China.","DOI":"10.1109\/IISWC50251.2020.00021"},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"8:1","DOI":"10.1145\/2799647","article-title":"Shielding Applications from an Untrusted Cloud with Haven","volume":"33","author":"Baumann","year":"2015","journal-title":"ACM Trans. Comput. Syst."},{"key":"ref_34","unstructured":"Arnautov, S., Trach, B., Gregor, F., Knauth, T., Martin, A., Priebe, C., Lind, J., Muthukumaran, D., O\u2019Keeffe, D., and Stillwell, M.L. (2016, January 2\u20134). {SCONE}: Secure Linux Containers with Intel {SGX}. Proceedings of the 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI 16), Savannah, GA, USA."},{"key":"ref_35","unstructured":"Tsai, C.C., Porter, D.E., and Vij, M. (2017, January 12\u201314). Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. Proceedings of the 2017 USENIX Annual Technical Conference (USENIX ATC 17), Santa Clara, CA, USA."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Shen, Y., Tian, H., Chen, Y., Chen, K., Wang, R., Xu, Y., Xia, Y., and Yan, S. (2020, January 16\u201320). Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX. Proceedings of the Twenty-Fifth International Conference on Architectural Support for Programming Languages and Operating Systems, Lausanne, Switzerland.","DOI":"10.1145\/3373376.3378469"},{"key":"ref_37","unstructured":"Li, X., Li, X., Dall, C., Gu, R., Nieh, J., Sait, Y., and Stockwell, G. (2022, January 11\u201313). Design and verification of the arm confidential compute architecture. Proceedings of the 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22), Carlsbad, CA, USA."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Lesjak, C., Hein, D., and Winter, J. (2015, January 9\u201312). Hardware-security technologies for industrial IoT: TrustZone and security controller. Proceedings of the IECON 2015\u201441st Annual Conference of the IEEE Industrial Electronics Society, Yokohama, Japan.","DOI":"10.1109\/IECON.2015.7392493"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Fitzek, A., Achleitner, F., Winter, J., and Hein, D. (2015, January 22\u201324). The ANDIX research OS\u2014ARM TrustZone meets industrial control systems security. Proceedings of the 2015 IEEE 13th International Conference on Industrial Informatics (INDIN), Cambridge, UK.","DOI":"10.1109\/INDIN.2015.7281715"},{"key":"ref_40","unstructured":"Sang, F., Lee, J., Zhang, X., and Kim, T. (2025, January 12\u201314). PORTAL: Fast and Secure Device Access with Arm CCA for Modern Arm Mobile System-on-Chips (SoCs). Proceedings of the 2025 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"4684","DOI":"10.1007\/s11227-018-2686-x","article-title":"Secure data processing for IoT middleware systems","volume":"75","author":"Ayoade","year":"2019","journal-title":"J. Supercomput."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"102776","DOI":"10.1016\/j.cose.2022.102776","article-title":"An internet of secure and private things: A service-oriented architecture","volume":"120","author":"Showail","year":"2022","journal-title":"Comput. Secur."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Cheng, J., Tang, X., and Liu, X. (2021). SDSBT: A Secure Multi-party Data Sharing Platform Based on Blockchain and TEE. Cyberspace Safety and Security, Springer.","DOI":"10.1007\/978-3-030-73671-2"},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1109\/TCAD.2017.2750067","article-title":"Enabling Security-Enhanced Attestation With Intel SGX for Remote Terminal and IoT","volume":"37","author":"Wang","year":"2018","journal-title":"IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Woo, S., Song, J., and Park, S. (2020). A Distributed Oracle Using Intel SGX for Blockchain-Based IoT Applications. Sensors, 20.","DOI":"10.3390\/s20092725"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"4456","DOI":"10.1109\/TII.2021.3123312","article-title":"A Data Trading Scheme with Efficient Data Usage Control for Industrial IoT","volume":"18","author":"Zhang","year":"2022","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"1703","DOI":"10.1109\/TII.2022.3170348","article-title":"Blockchain-Based Federated Learning With Secure Aggregation in Trusted Execution Environment for Internet-of-Things","volume":"19","author":"Kalapaaking","year":"2023","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"1318","DOI":"10.1109\/TIFS.2019.2938875","article-title":"SecGrid: A Secure and Efficient SGX-Enabled Smart Grid System with Rich Functionalities","volume":"15","author":"Li","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"15785","DOI":"10.1109\/JIOT.2021.3052604","article-title":"Blockchain and SGX-Enabled Edge-Computing-Empowered Secure IoMT Data Analysis","volume":"8","author":"Gao","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Weiser, S., and Werner, M. (2017, January 22\u201324). SGXIO: Generic Trusted I\/O Path for Intel SGX. Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy, Scottsdale, AZ, USA.","DOI":"10.1145\/3029806.3029822"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"1589","DOI":"10.1109\/TIFS.2019.2945621","article-title":"Establishing Trusted I\/O Paths for SGX Client Systems with Aurora","volume":"15","author":"Liang","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Thalheim, J., Unnibhavi, H., Priebe, C., Bhatotia, P., and Pietzuch, P. (2021, January 26\u201328). rkt-io: A direct I\/O stack for shielded execution. Proceedings of the Sixteenth European Conference on Computer Systems, Online Event, UK.","DOI":"10.1145\/3447786.3456255"},{"key":"ref_53","doi-asserted-by":"crossref","unstructured":"Stancu, F.A., Tranc\u0103, D.C., and Chiroiu, M. (2019, January 26). TIO\u2014Secure Input\/Output for Intel SGX Enclaves. Proceedings of the 2019 International Workshop on Secure Internet of Things (SIOT), Luxembourg.","DOI":"10.1109\/SIOT48044.2019.9637105"},{"key":"ref_54","doi-asserted-by":"crossref","unstructured":"Jang, Y., and Keem, S. (2024, January 3\u20136). SGX-USB: Secure USB I\/O Path for Secure Enclaves. Proceedings of the 57th Hawaii International Conference on System Sciences, HICSS 2024, Hilton Hawaiian Village Waikiki Beach Resort, Honolulu, HI, USA.","DOI":"10.24251\/HICSS.2023.893"},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Peters, T., Lal, R., Varadarajan, S., Pappachan, P., and Kotz, D. (2018, January 2). BASTION-SGX: Bluetooth and Architectural Support for Trusted I\/O on SGX. Proceedings of the 7th International Workshop on Hardware and Architectural Support for Security and Privacy, Los Angeles, CA, USA.","DOI":"10.1145\/3214292.3214295"},{"key":"ref_56","doi-asserted-by":"crossref","unstructured":"Eskandarian, S., Cogan, J., Birnbaum, S., Brandon, P.C.W., Franke, D., Fraser, F., Garcia, G., Gong, E., Nguyen, H.T., and Sethi, T.K. (2019, January 19\u201323). Fidelius: Protecting User Secrets from Compromised Browsers. Proceedings of the 2019 IEEE Symposium on Security and Privacy (SP), San Francisco, CA, USA.","DOI":"10.1109\/SP.2019.00036"},{"key":"ref_57","unstructured":"Shinde, S., Chua, Z.L., Narayanan, V., and Saxena, P. (June, January 30). Preventing page faults from telling your secrets. Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, Xi\u2019an, China."},{"key":"ref_58","doi-asserted-by":"crossref","unstructured":"Wang, W., Chen, G., Pan, X., Zhang, Y., Wang, X., Bindschaedler, V., Tang, H., and Gunter, C.A. (\u20133, January 30). Leaky cauldron on the dark land: Understanding memory side-channel hazards in SGX. Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, Dallas, TX, USA.","DOI":"10.1145\/3133956.3134038"},{"key":"ref_59","doi-asserted-by":"crossref","unstructured":"Xu, Y., Cui, W., and Peinado, M. (2015, January 17\u201321). Controlled-channel attacks: Deterministic side channels for untrusted operating systems. Proceedings of the 2015 IEEE Symposium on Security and Privacy, San Jose, CA, USA.","DOI":"10.1109\/SP.2015.45"},{"key":"ref_60","unstructured":"Lee, S., Shih, M.W., Gera, P., Kim, T., Kim, H., and Peinado, M. (2017, January 16\u201318). Inferring fine-grained control flow inside {SGX} enclaves with branch shadowing. Proceedings of the 26th USENIX Security Symposium (USENIX Security 17), Vancouver, BC, Canada."},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"693","DOI":"10.1145\/3296957.3173204","article-title":"Branchscope: A new side-channel attack on directional branch predictor","volume":"53","author":"Evtyushkin","year":"2018","journal-title":"ACM SIGPLAN Not."},{"key":"ref_62","doi-asserted-by":"crossref","unstructured":"Cho, H., Zhang, P., Kim, D., Park, J., Lee, C.H., Zhao, Z., Doup\u00e9, A., and Ahn, G.J. (2018, January 3\u20137). Prime+ count: Novel cross-world covert channels on arm trustzone. Proceedings of the 34th Annual Computer Security Applications Conference, San Juan, PR, USA.","DOI":"10.1145\/3274694.3274704"},{"key":"ref_63","unstructured":"Costan, V., Lebedev, I., and Devadas, S. (2016, January 10\u201312). Sanctum: Minimal hardware extensions for strong software isolation. Proceedings of the 25th USENIX Security Symposium (USENIX Security 16), Austin, TX, USA."},{"key":"ref_64","unstructured":"Kim, T., Peinado, M., and Mainar-Ruiz, G. (2012, January 8\u201310). {STEALTHMEM}:{System-Level} protection against {Cache-Based} side channel attacks in the cloud. Proceedings of the 21st USENIX Security Symposium (USENIX Security 12), Bellevue, WA, USA."},{"key":"ref_65","unstructured":"Werner, M., Unterluggauer, T., Giner, L., Schwarz, M., Gruss, D., and Mangard, S. (2019, January 14\u201316). {ScatterCache}: Thwarting cache attacks via cache set randomization. Proceedings of the 28th USENIX Security Symposium (USENIX Security 19), Santa Clara, CA, USA."},{"key":"ref_66","doi-asserted-by":"crossref","unstructured":"Kumar, S., Panda, A., and Sarangi, S.R. (2022). A Comprehensive Benchmark Suite for Intel SGX. arXiv.","DOI":"10.1109\/ISPASS55109.2022.00014"},{"key":"ref_67","doi-asserted-by":"crossref","unstructured":"Orenbach, M., Lifshits, P., Minkin, M., and Silberstein, M. (2017, January 23\u201326). Eleos: ExitLess OS Services for SGX Enclaves. Proceedings of the Twelfth European Conference on Computer Systems, Belgrade, Serbia.","DOI":"10.1145\/3064176.3064219"},{"key":"ref_68","unstructured":"Bogus, A. (2008). Lighttpd, Packt Publishing Ltd."},{"key":"ref_69","unstructured":"Apache HTTP Benchmarking Tool (2024, September 10). ApacheBench Documentation. Available online: http:\/\/httpd.apache.org\/docs\/2.4\/programs\/ab.html."},{"key":"ref_70","doi-asserted-by":"crossref","first-page":"253","DOI":"10.1145\/2490301.2451145","article-title":"Iago attacks: Why the system call API is a bad untrusted RPC interface","volume":"41","author":"Checkoway","year":"2013","journal-title":"ACM SIGARCH Comput. Archit. News"},{"key":"ref_71","unstructured":"RedisLabs (2024, December 20). Memtier_BENCHMARK. Available online: https:\/\/github.com\/RedisLabs\/memtier_benchmark."},{"key":"ref_72","doi-asserted-by":"crossref","first-page":"910","DOI":"10.1109\/TCC.2019.2892449","article-title":"Architectural protection of trusted system services for SGX enclaves in cloud computing","volume":"9","author":"Liang","year":"2019","journal-title":"IEEE Trans. Cloud Comput."},{"key":"ref_73","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3626718","article-title":"Anchor: A Library for Building Secure Persistent Memory Systems","volume":"1","author":"Stavrakakis","year":"2023","journal-title":"Proc. ACM Manag. Data"},{"key":"ref_74","unstructured":"Jia, Y., Liu, S., Wang, W., Chen, Y., Zhai, Z., Yan, S., and He, Z. (2022, January 11\u201313). HyperEnclave: An open and cross-platform trusted execution environment. Proceedings of the 2022 USENIX Annual Technical Conference (USENIX ATC 22), Carlsbad, CA, USA."},{"key":"ref_75","doi-asserted-by":"crossref","unstructured":"Coppolino, L., D\u2019Antonio, S., Iasio, D., Mazzeo, G., and Romano, L. (2024). An Experimental Evaluation of TEE technology Evolution: Benchmarking Transparent Approaches based on SGX, SEV, and TDX. arXiv.","DOI":"10.2139\/ssrn.5043414"},{"key":"ref_76","first-page":"1","article-title":"Intel tdx demystified: A top-down approach","volume":"56","author":"Cheng","year":"2024","journal-title":"ACM Comput. Surv."},{"key":"ref_77","unstructured":"Li, D., Mi, Z., Ji, C., Tan, Y., Zang, B., Guan, H., and Chen, H. (2023, January 10\u201312). Bifrost: Analysis and Optimization of Network {I\/O} Tax in Confidential Virtual Machines. Proceedings of the 2023 USENIX Annual Technical Conference (USENIX ATC 23), Boston, MA, USA."},{"key":"ref_78","unstructured":"Li, M., Srivastava, S., and Yan, M. (2024). Bridge the Future: High-Performance Networks in Confidential VMs without Trusted I\/O devices. arXiv."},{"key":"ref_79","doi-asserted-by":"crossref","unstructured":"Ngabonziza, B., Martin, D., Bailey, A., Cho, H., and Martin, S. (2016, January 1\u20133). Trustzone explained: Architectural features and use cases. Proceedings of the 2016 IEEE 2nd International Conference on Collaboration and Internet Computing (CIC), Pittsburgh, PA, USA.","DOI":"10.1109\/CIC.2016.065"}],"container-title":["Future Internet"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/1\/32\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,8]],"date-time":"2025-10-08T10:27:58Z","timestamp":1759919278000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1999-5903\/17\/1\/32"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,13]]},"references-count":79,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,1]]}},"alternative-id":["fi17010032"],"URL":"https:\/\/doi.org\/10.3390\/fi17010032","relation":{},"ISSN":["1999-5903"],"issn-type":[{"value":"1999-5903","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1,13]]}}}