Intel SGX 'safe' room easily trashed: Enclave malware demo'd

guest · Feb 12, 2019

Intel SGX 'safe' room easily trashed: Enclave malware demo'd
February 12, 2019
https://www.theregister.co.uk/2019/02/12/intel_sgx_hacked/

Updated Security researchers have found that Intel's Software Guard Extensions (SGX) don't live up to their name. In fact, we're told, they can be used to hide pieces of nasty malware that can silently masquerade as normal applications.

In a paper scheduled for publication on Tuesday, "Practical Enclave Malware with Intel SGX," brainiacs at the Graz University of Technology in Austria describe a technique for bypassing various security technologies like ASLR, and executing arbitrary code that can steal information or conduct denial-of-service attacks, via SGX and ROP.

This means a malicious enclave can work around its restrictions – no syscalls nor knowledge of host application memory – to run arbitrary code under the disguise of a host process, and parade around the computer rather than staying confined to its shoebox.
The attack relies on the Transactional Synchronization eXtensions (TSX) in modern Intel processors, in conjunction with a novel technique called TSX-based Address Probing (TAP).
Click to expand...

Practical Enclave Malware with Intel SGX (PDF): https://regmedia.co.uk/2019/02/12/sgxmalware.pdf

Log in or Sign up

Intel SGX 'safe' room easily trashed: Enclave malware demo'd

guest Guest

Log in or Sign up

Intel SGX 'safe' room easily trashed: Enclave malware demo'd

guest Guest

Useful Searches