Prof. Lucas Davi, Department of Computer Science at University of Duisburg-Essen, goes into the question: How Secure are Trusted Execution Environments? Finding and Exploiting Memory Corruption Errors in Enclave Code
Trusted execution environments (TEEs) such as Intel’s Software Guard Extensions enforce strong isolation of security-critical code and data. While previous work has focused on side-channel attacks, this talk will investigate memory corruption attacks such as return-oriented programming in the context of TEEs. We will demonstrate how an attacker can exploit TEE enclaves and steal secret information. In addition, we will investigate the host-to-enclave boundary and its susceptibility to memory corruption attacks and how we can develop analysis approaches to detect vulnerable enclave code.
