TEE and Confidential Computing

Explores secure memory techniques for VM-based TEEs and efficient protected execution.

Connects confidential computing with efficient multi-GPU machine learning and shows how to reduce system bottlenecks in trusted infrastructure.

Bridges virtualization and enclave protection across TEE platforms, highlighting system support for deployable trusted execution.

Explores how to support elastic confidential VMs with secure and dynamic CPU scaling, improving the flexibility and efficiency of TEE-based systems.

Studies how to improve networking performance for confidential VMs without relying on trusted I/O devices, targeting practical system optimization in confidential cloud settings.

Studies side-channel vulnerabilities that break confidentiality guarantees in encrypted and confidential execution settings.

Examines subtle security implications of RMP entry caching in SEV-SNP and expands the attack surface analysis of modern confidential computing platforms.

Shows how ciphertext side channels can break constant-time cryptographic implementations running inside AMD SEV.

Demonstrates a side-channel attack surface exposed by the power reporting interface in AMD SEV platforms.

Uncovers a microarchitectural attack that breaks isolation assumptions in AMD SEV through TLB manipulation.

Shows how crash-based isolation assumptions can fail in AMD SEV and lead to cross-boundary memory exposure.

Studies attacks that exploit unprotected I/O operations in AMD SEV, highlighting early weaknesses in confidential VM designs.

Addresses speculative-execution threats in SGX and reflects broader work on attack surfaces and mitigation around TEE platforms.

A systems-oriented overview of TEE design tradeoffs and common pitfalls, useful for understanding how to build more secure confidential computing systems.

Focuses on detecting vulnerabilities and deriving stronger design and implementation guidance for secure cryptographic and confidential systems.

Studies security and isolation properties of serverless platforms, representing broader cloud security work beyond TEE-specific mechanisms.

This broader line of work also connects to cloud multi-tenancy, isolation failures, and shared-infrastructure threats that matter beyond confidential computing alone.