Cloud Native Computing Foundation KubeCon + CloudNativeCon China 2019 (Shanghai), 5 Jul 2019

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Secure Container with SGX: Protecting Secret in Cloud Environment - Isaku Yamahata & Xiaoning Li

Description

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io

Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects

Secure Container with SGX: Protecting Secret in Cloud Environment - Isaku Yamahata & Xiaoning Li

In cloud computing container is widely adapted, but its isolation is weak. It's important to protect secrets even from cloud service provider. Software Guard Extention(SGX) provides Trusted Execution Environment(TEE) where only Intel and SGX implementation is trusted with untrusted OS/VMM/BIOS. It requires to modify applications which is sometimes difficult for various reasons. Ideally unmodified user binary can run in SGX enclave. In this talk, Library OS to allow unmodified binary to run within SGX TEE is introduced. It hooks system call by replacing shared library. Go is most popular language for cloud native applications with uniqueness to use static link. We enhanced Graphene LibOS to support golang binary and hardened it for production use. We will share our experience to add golang support to Graphene-SGX LibOS and our future plan.

https://sched.co/Nrp9

A

Let's get started: I'm Misaka, Mata I'm, a software engineer at Inter Milan. Is it so far? Yeah I have been working on those.

B

A

On recently, yeah I'm working on s, Jake's under so grabbing library, lowest voice in this station, was originally planned as a joint session with the shower sharmini from arabic loud, but unfortunately, he couldn't come so I will give a disparate assess, with the presentation alone in the SE suniye I'd like to introduce what is trusted: exaction, exact strain in bad environment and how SD x FC, and how to adapt it to run your your language binary without any modification.

A

Not these days. These desecrater environment is quite widely adopted and its model is to trust your cloud service provider, crud crud service providers set up set up Connie OS kernel hypervisor, so that any user can run. You are a pre camera in the application in the same same physical hardware, and so user can do anything so cloud service provider has to protect them tables, in this case OS kernel hypervisor, so that they can users can't do bad thing.

A

However, you know this miss Connie hypervisor is a huge, complex software, so there are green, green Bremner abilities it's so so once Congress compromised for system is green ever so your data is in danger, so it was maybe maybe the are cambia Maris's cloud administrator, so he can configure harbour control canada. So in this case he can simply inject Natasha pre compromised the Carney wife. By by that, without any bloom they are pretty recently.

C

A

Good security practices defense index also, we should have a much better protection so that if one without one of the protections is broken in even in that in such case yeah you are system can stay still can stay in safe. But in this case we.

C

A

One protection so that notion of trusted execution, valid environment can see basically yeah. We have a what is called unplayed and that is a sort of protected area, so, even if maybe canary a hypervisor, if sometimes even family is compromised, your on crib, it can still protect. It probably permeate, can't read any memory in okay, so that concept of trusted exaction, environment under environment.

A

So it's Jax, software God extension is one of the implementation of te and the TAS Jackson crevices are transmitted on the SDS and gravies special and including Inc repeated memory region within uses.

A

Special special encrypted tend to be included, baited the memory region in user space and its memories, and repeated so Indira, o a memory, bus, the data and competitive. So if you look into memory or DRAM memory bus it, you can read jack and also its exact to start with a measurement. So we can't guarantee that it's unplayable starts with a with no state, so no one can no one can modify it starting starting stage. So we know we know it's state is non state and also to help uncrate to keep in safety. Yeah.

A

Some its environment is reciprocity. For example, some instruction is not allowed, for example, with the TSE system. Core instruction is not allowed if such instruction is issued it visiting it without resulting undefined exception. So.

A

Exception so risks is very good, so how can I adapt it? So basically, the earth is modifying your application at the source code level. So we have to. We have to identify which data we directive protect and split your source source code into trusted mode. Trust is trusted code and also protect untrusted code.

A

So we we need to put source code to manipulate your data into uncrate uncle angry, it's the exactly so this means this means major reorganize organization of your application and and also you have to learn ethics, how to use ethics, and you have to use aesthetics correctly, and this is a very hard work so how to mitigate that cost.

A

Sgx SDK libraries provided so we can use a we can use library so that under hard work of using less is to using it correctly is done by like its library, but still we have to modify our application at source code already. So it's an application cost is too high, so we want. We want yet another option at low cost. So you know: do you remember that Greek gkh said that? Is he not no one uses DX?

A

So I'm, that is, that that isn't why I'm working on this so as I still did provide low cost option. So what means low cost to users? It means you can bring your unmodified balance so that you can shippi run your binary machine uncle agree. So your so your data will be protected, so the problems have so big. One of the ha solution is to use library OS. You know, I said SEM and levies restrict it. So, for example, system court cannot be used because we don't trust connect.

A

So we have to do something under library always provides a basically provides a sort of Linux system called emulation, and so that so that unmodified application can be run inside inside the exam clip. But it's a there is a trade off with me using a we. If we use BlackBerry OS yeah, it's really a big software, because yeah we need to emulate to the system code, so trusted computing base beside will be plush, but it's costly is wrong. On the other hand, if we we use a CX negatively yeah, it's trust. It's PC.

A

Besides, we really potentially very small, but its cost is high, so this is a very trade-off so which choice is better for you is depends on. You are requirement, so maybe yeah. We have a bit friction on budget. We have a restriction on engine grease off property. We have a pressure on schism, so we directed we need to choose based on those parameters, and probably this is not exclusivity plumbery. If we have to do something agile, yeah, we can use this low cost of this solution so that we can.

A

We can do something today, but later yeah we we can run, is dixmoor rita and, if necessary, yeah you can switch to adoption. So this is a very. This is very true, though, and it depends on you our requirement.

A

Unreal right now, yeah this option is missing so I'd like to provide this this option, so basically how lobular always support and modify the binary inside I'm Craig- and this is a just- a Jarek discussion, a mystery yeah. It's called basically library, always targets C or C++ application and the usually it uses. Ribisi are just a driver, so shared library, deep divisions, a shared library, can be replaced easily. So typically library OS provide a modified deep sea so which depressed Cisco instruction with function called interlibrary OS.

A

So when application requests a system call actually it go see, it goes into libraries and then the system, Cory emulation, will happen inside inside libraries and it really needs a host system code up, for example, file system. I io 112, I oh yeah. We have to use what was correct, so in that case, yeah we exit and grave under it will pass the request to untrusted code and then untrusted code proxy system call into host :, which is untrusted under in this case.

A

In this security model we don't trust con wilkani, because color can be compromised, so it can return wrong.

A

Something but result to try to do something with unclaimed, so trust interlibrary always has to check it return return the result, the it can be used safety to seed application itself.

A

No ha so I said main target is C or C++ library, but actually it's applica.

A

Its applicable range is much wider because, for example, python see puzzle is between C, so we can run Python with rival us in aggregate. So we cannot pass on inside. Ok under how about Java I'm sorry, open JDK is between C, so we can also run open JDK with so Java and Python and many other language language is between C. So many we can apply this this this architecture to many languages, so so that questions go language.

A

You know it's no doubt golem, which is one of the most popular language for cloud native application, and this is a citation from from github. It ranks number number 3d twist on the you know go wrong which is ranked as forward so yeah. We have to yeah Mira we without to reduce support for language and without vomit yep.

A

We need we, we would loose many new debase, but go along, which is very unique under its short technically, it shows taken out thick technical changes to support, to support to support for libraries after a bore, doesn't use the machine and it has its own run time between go language, and it's long time is statically dict. So it's very hard to replace replaced its just call with system call instruction with function called under saw.

A

Well, you know, ball. Routing is a very unique feature for go and it has a very small stock size, and so, if we simply function for interlibrary, it is very likely to to likely to overthrow each stock. So we have to do something, and also because of its small small stud size. It requires accurate emulation of the protocol signals. In fact, in C or C++ case, unique signal ammunition can be very inaccurate, even wrong emulation, yeah application camera, but god doesn't like that.

A

So it requires accurate emanation of posting on the so yeah its behavior is different from DVC, so it has it push up pressure system contamination. So probably we have to fix many things. Oh.

A

So far, yeah I have discussed. I have discussed generic thing, so attractive, move onto concrete discussion, a concrete project, and actually we picked a graphene library, OS project. This is a open source project and in Essex Community this is very known and very popular one under it is it stopwatch. It is a library always for unmodified applications, but go is not supported and it imitates new system called under it supports much process. This is very unlike unique. Rk unicorn in case unique honor typically doesn't support much process.

A

It means a fork exactly ten three years, but usually yeah in CEA's application uses a much process like changing, so observe our database yeah. It is quite common to you not brought so much process of these very required required under, so it supports much platform. It.

D

A

Now, as the open source Linux is supported under so FreeBSD supported under Somerset, they are working on Mac, OS or Windows, but I don't know but yeah the picture yeah. It can support.

A

Under disguise short, it's a picture, a top bottom of the layer.

D

A

Have a third but home adaptation layer to obstruct its platform and, after its platform, part, is split into why the untrusted code to proxy to proxy system hot system called request to host under in grave. We have a shot at home, absurd Sundaya on the on top of it library, OS part which emanates.

A

And on top of it, we have a modified of Geneva C and it converts it folks system core instruction into function system code. So actually, when application request code after it is, it will become a normal function pouring into level voice, and on top of it we have a modified application. Typically, it's its own battery. Under it comes it's shared red-eyes.

A

Oh right now, yeah we are working hard to support the core language and right now the current state aces we are working on to up swimming but locally. We have a sort of working code and especially.

D

Yeah we have a.

A

System called eppley ammunition, if even if application areas, sister McCrory structure, yeah we trap and immunity under, so it's very slow because it because sort of unclear exit or enter so we it's very catastrophic to its Hamas. So we have a fat optimization under Sonya. We like to be yes so we'd like to have VDS. Oh yeah, it's because it's optimization under so we introduce a dedicated to stuck to run library.

B

A

Code because ball start is very small, so we don't want a stack of overflow under Sonya. We implemented a create a mission of project Sigma like cigarette stock and so on, and we get many system correlation issues and we are fixing it. We have fixed many things and we are fixing issues, meaning issues. I'm, sorry, yeah library always sees like well the problem of library, oasis its ammunition to implement system. Color emulation is a hard work. It requires meaning much engineering resource, so yeah plus spot meter will increase, will continue.

A

Okay, so let me show demo.

A

So now we have a small, simple hero while the example on exempt under yeah, just it uses that go routine and it prints hello world and there it's very sick to understand under under now. Next step is to measure its application so that we can have a measurement and there when we run this application and I s exactly yeah. We can guarantee it's not modified by summer.

A

Now we will start measurement right now, but now we measure we create a memory image of unclick under the measure of it under its measurement is different yeah. Next we try to run this go by the under graphic library, waist.

A

Under it starts, and it takes a wire to two major memory and because mizzen memory on them and then ultimately sprint it out under this- is only short its result. So next I'd like to show how it behavior behaves so I enable debug option to show a mini the backlog. Oh.

A

Yeah first measurement is done under yeah, we know measurement is correct and then it starts many things and yeah. It does many things because you know reaching to main function. Yeah. There are many things to be done to initialize : time under go under and them actually many things need to be done and then it and it exit memory under actually yeah. It took many long time to reach me main function.

A

Okay, the summary yeah trusted- he is a key concept for cloud environment in city away under is X is a basic building blocks for a te and yeah.

A

It's adaptation barrier is very high, so we directed provider lower cost option under library, always the one with a solution for it, and we are working on gravity X to support it under and that communities right now working hard to stabilize it, and we are planning to release 1.0 in dry so dry. So please give it a try right now: yeah, it's in quality is very stubborn attic and also, if you are developer yeah, please contribute to it, because this is a library OS and it's sort of funny beast.

A

So if you contributed it, it is sure you will fit many interesting bugs salacious, so you'll be you will get irrigator I!

A

Guess, that's it. So we have several times so. I can get. Many I can get questions.

D

My question is that.

D

If graphene SGX for a cobra, if I want to run the core application, rain, : should I recompile the program, wait: clapping s, jigs a library or using my modified binary weed, cropping SGX runtime. No.

A

I mean unmodified, miss I modified binary. You don't have to recompile one I, just bring me up by binary.

D

Yeah, okay, so the next question is, you said: cropping as you exit go runtime but typically go binary is not hub, its own runtime, but it's the binary. So how do you cook applications? A system call or something.

D

A

So your question is how to handle just core instruction.

D

A

D

It's very easy for a GOG but I guess it's very hard for ya. The Quran requirement.

A

Is we should not modify balance? So? Yes, so ya assumptions, sis core instruction is embedded in target binary. Yes, so what we have two approaches? One is trap and image because she score instruction is not allowed in and grade so it triggers a nudey exception, so we can chop it on the immunity, but it in it in Casa, Enclave a widget on enter Monday's overhead is very, very high. Yes, so we are incrementing by an Apache to replace Sasori.

D

A

With function called a.

D

Minor patching yeah, yeah yeah. Thank you very much. It's cool yeah. Thank you.

C

Hello I have a question about the performances so compared to the native application performances. So what did you measure the performance between in incra and the native I.

A

See it depends on work right if it's a CPU intensive, it's almost the same because just CPU grams inside the unclear and it doesn't require any special work. But if you work Rody's system called intensive, probably you get you get worse.

A

Actually yeah there is a after the epidemic paper on graphene under it showed some result on normal, normal binaries, not not worn, which guest but I guess Tennessee will be Silla.

E

Hi I had a question about the Iago attacked, so OD Iago attacks, hmm yeah, so Micra. We we did a similar acceleration right there with library operating system. So this was like base of the scone paper and we're looking at the Iago attacks, and then we were trying to figure out. How do you do shielding right, disco people mentioned shielding, but they don't really say how to do it.

A

E

So yeah, so so what we ended up going there was like we we went into this whole hypothesis. Is that in order to perform proper shielding, you would have to replicate kind of all the data structures in the hosel per the host operating system. Anyway,.

A

To syria, turkey is a difficult and at least yeah graphene has a file system protection. We can have a hush body, fall file system files under week a specified, and then we read files and then we calculate to hush, and then we need check how she same wanna yeah, because but.

E

A

A trade-off technically under promise yeah.

E

I think, like the the one canonical example, was the Malik example right memory. Location like are you mmm-hmm like and also like with, because using graphene you're supporting multi process and when I do a photo? I know it's not giving me back like a P ie, which is.

A

So yeah so to protect against I, have attack actually library.

C

A

Always minimize minimize use of host system code under attractive me8 as much as possible inside libraries for exam for exactly Marcus yeah library, always Chuck's, which are which but other species use and then just a mark is Emma. Map is a hundred inside.

A

So in that case, near host host country is not used so to minimize attack stuff from Canada yeah Grameen minimize the use of hostages in court yeah.

E

So so what we're trying to do is to minimize the hostess. Of course we try to use the solo pipe in the base, yeah yeah, but yeah. This is cool thanks. So much yep.

B

Key provide xgx protection, add a container level instead of individual binaries.

A

B

A

Under yes and Grameen library waste itself, where it allows because it does support much much process on the fork under attack and the right now we don't have a container and runtime. Yet.

B

Because they would probably solve the needs to handle every single programming language and how it interacts with Siskel's.

B

Another question I'm not very familiar with how exacts works internally. You mentioned that it encrypts the memory. hmm Where do the encryption keys live.

A

Inside the CPU.

A

D

A

Cpu under after ye yeah for memory and put encryption on uncrate boot up CPU creates its key in internally and then it using and the software can cannot know it.

B

How how does it map to the specific malloc she trusted process? How can it, how does it prevents a different process on the same host from using the key? Oh.

A

So sorry, we need to create multiple Enclave under under on Crabbie's associate our kids associated to the unplayed. So if we have a different time frame, lucky is different under sorry, yeah I'm, sorry, I'm, not a hardware, expert and right path to answer such a primitive question.

A

Okay: okay, thank you for coming.