论文标题
从可信赖的执行环境的区块链应用中汲取的经验教训以及对未来研究的影响
Lessons Learned from Blockchain Applications of Trusted Execution Environments and Implications for Future Research
论文作者
论文摘要
现代计算机系统倾向于依靠大型信任的计算库（TCB）进行操作。为了解决TCB腹胀问题，硬件供应商开发了机制，以启用或促进创建受信任的执行环境（TEE），其中关键软件应用程序可以在孤立的环境中安全地执行。即使在主机OS受到对手损害的情况下，也可以保证TEES内部软件的机密性和完整性等关键安全属性。诚信和安全的承诺使开发人员将其用于涉及访问控制，PK和IoT等的用例。 这些应用包括与区块链相关的用例。如果没有自己的实施挑战和潜在的陷阱，则不会出现T恤的使用。在本文中，我们研究了基于区块链的应用程序提议的TEE用例的假设，安全模型和操作环境。练习和分析有助于硬件TEE研究社区确定一些开放的挑战和机会，并重新考虑硬件T恤的设计。
Modern computer systems tend to rely on large trusted computing bases (TCBs) for operations. To address the TCB bloating problem, hardware vendors have developed mechanisms to enable or facilitate the creation of a trusted execution environment (TEE) in which critical software applications can execute securely in an isolated environment. Even under the circumstance that a host OS is compromised by an adversary, key security properties such as confidentiality and integrity of the software inside the TEEs can be guaranteed. The promise of integrity and security has driven developers to adopt it for use cases involving access control, PKS, IoT among other things. Among these applications include blockchain-related use cases. The usage of the TEEs doesn't come without its own implementation challenges and potential pitfalls. In this paper, we examine the assumptions, security models, and operational environments of the proposed TEE use cases of blockchain-based applications. The exercise and analysis help the hardware TEE research community to identify some open challenges and opportunities for research and rethink the design of hardware TEEs in general.
