Dynamic Binary Translation for SGX Enclaves

Understand

Enclaves, such as those enabled by Intel SGX, offer a hardware primitive for shielding user-level applications from the OS.

• While enclaves are a useful starting point, code running in the enclave requires additional checks whenever control or data is transferred to/from the untrusted OS.
• The enclave-OS interface on SGX, however, can be extremely large if we wish to run existing unmodified binaries inside enclaves.
• This paper presents Ratel, a dynamic binary translation engine running inside SGX enclaves on Linux.