The DOI matches its Crossref record; 38 of the 38 references it cites were found in a registry or an index.
A comparison study of intel SGX and AMD memory encryption technology
Open accessAbstract
Hardware-assisted trusted execution environments are secure isolation technologies that have been engineered to serve as efficient defense mechanisms to provide a security boundary at the system level. Hardware vendors have introduced a variety of hardware-assisted trusted execution environments including ARM TrustZone, Intel Management Engine, and AMD Platform Security Processor. Recently, Intel Software Guard eXtensions (SGX) and AMD Memory Encryption Technology have been introduced. To the best of our knowledge, this paper presents the first comparison study between Intel SGX and AMD Memory Encryption Technology in terms of functionality, use scenarios, security, and performance implications. We summarize the pros and cons of these two approaches in comparison to each other.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The cited source says what the claim attributes to it.
In the citing paper
“Intel SGX provides remote attestation policy that evaluates the enclave identity, integrity of the code inside of it, and guarantees the authenticity of the Intel processor.”
From Confidential Computing Across Edge‐To‐Cloud for Machine Learning: A Survey Study (2025) · cites this paper as [53]
The cited source says what the claim attributes to it.
In the citing paper
“Remote attestation serves as a verification protocol for the service provider to evaluate the health of enclave(s) created at a remote location [27,53,54].”
From Confidential Computing Across Edge‐To‐Cloud for Machine Learning: A Survey Study (2025) · cites this paper as [53]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
New directions in cryptography
Diffie, W., & Hellman, M. (1976) · IEEE Transactions on Information Theory · doi:10.1109/tit.1976.1055638 · Cited by 14,713
Applied cryptography: Protocols, algorithms, and source code in C
(1994) · Computer Law & Security Report · doi:10.1016/0267-3649(94)90017-5 · Cited by 3,411
Ristenpart, T., Tromer, E., Shacham, H., & Savage, S. (2009) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/1653662.1653687 · Cited by 2,055
(2016) · IACR Cryptology ePrint Archive · Cited by 1,288
kvm : the Linux Virtual Machine Monitor
Kivity, A. (2007) · Cited by 1,267
Innovative instructions and software model for isolated execution
Mckeen, F., Alexandrovich, I., Berenzon, A., Rozas, C. V., Shafi, H., Shanbhogue, V., & Savagaonkar, U. R. (2013) · Hardware and Architectural Support for Security and Privacy · doi:10.1145/2487726.2488368 · Cited by 1,103
Halderman, J. A., Schoen, S. D., Heninger, N., Clarkson, W., Paúl, W., Calandrino, J. A., Feldman, A. J., Appelbaum, J., & Felten, E. W. (2009) · Communications of the ACM · doi:10.1145/1506409.1506429 · Cited by 980
Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems
Xu, Y., Cui, W., & Peinado, M. (2015) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2015.45 · Cited by 725
VC3: Trustworthy Data Analytics in the Cloud Using SGX
Schuster, F., Costa, M., Cédric Fournet, A., Gkantsidis, C., Peinado, M., Mainar-Ruiz, G., & Russinovich, M. (2015) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2015.10 · Cited by 594
SCONE: secure Linux containers with Intel SGX
(2016) · Operating Systems Design and Implementation · doi:10.5555/3026877.3026930 · Cited by 582
Shielding Applications from an Untrusted Cloud with Haven
Baumann, A., Peinado, M., & Hunt, G. C. (2015) · ACM Transactions on Computer Systems · doi:10.1145/2799647 · Cited by 509
Götzfried, J., Eckert, M., Schinzel, S., & Müller, T. (2017) · European Workshop on System Security · doi:10.1145/3065913.3065915 · Cited by 351
Malware Guard Extension: Using SGX to Conceal Cache Attacks
Schwarz, M., Weiser, S., Gruss, D., Maurice, C., & Mangard, S. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-60876-1_1 · Cited by 350
Using innovative instructions to create trustworthy software solutions
Hoekstra, M., Lal, R., Pappachan, P. M., Phegade, V., & del Cuvillo, J. (2013) · Hardware and Architectural Support for Security and Privacy · doi:10.1145/2487726.2488370 · Cited by 349
Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch ShadowingPreprint
Lee, S., Shih, M.-W., Gera, P., Kim, T., Kim, H., & Peinado, M. (2016) · arXiv (Cornell University) · doi:10.48550/arxiv.1611.06952 · Cited by 337
Software Grand Exposure: SGX Cache Attacks Are PracticalPreprint
Brasser, F., Müller, U., Dmitrienko, A., Kostiainen, K., Čapkun, S., & Sadeghi, A. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1702.07521 · Cited by 294
Mckeen, F., Alexandrovich, I., Anati, I., Caspi, D., Johnson, S., Leslie-Hurd, R., & Rozas, C. V. (2016) · doi:10.1145/2948618.2954331 · Cited by 243
CacheZoom: How SGX Amplifies the Power of Cache Attacks
Moghimi, A., Irazoqui, G., & Eisenbarth, T. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-66787-4_4 · Cited by 237
Characterizing hypervisor vulnerabilities in cloud computing servers
Perez-Botero, D., Szefer, J. M., & Lee, R. B. (2013) · doi:10.1145/2484402.2484406 · Cited by 191
AsyncShock: Exploiting Synchronisation Bugs in Intel SGX Enclaves
Weichbrodt, N., Kurmus, A., Pietzuch, P. R., & Kapitza, R. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-45744-4_22 · Cited by 177
Lucy in the sky without diamonds: Stealing confidential data in the cloud
Rocha, F., & Correia, M. P. (2011) · IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W) · doi:10.1109/dsnw.2011.5958798 · Cited by 169
A Memory Encryption Engine Suitable for General Purpose Processors.Preprint
Gueron, S. (2016) · IACR Cryptology ePrint Archive · Cited by 165
Jang, Y., Lee, J., Lee, S., & Kim, T. (2017) · Workshop on System Software for Trusted Execution (SysTEX) · doi:10.1145/3152701.3152709 · Cited by 144
Software Grand Exposure: SGX Cache Attacks Are Practical
Brasser, F., Müller, U., Dmitrienko, A., Kostiainen, K., Čapkun, S., & Sadeghi, A. (2017) · TUbilio (Technical University of Darmstadt) · Cited by 140
Hacking in Darkness: Return-oriented Programming against Secure Enclaves
Lee, J., Jang, J. S., Jang, Y., Kwak, N., Choi, Y., Choi, C., Kim, T., Peinado, M., & Kang, B. B. (2017) · USENIX Security Symposium · Cited by 130
Brenner, S., Wulf, C., Goltzsche, D., Weichbrodt, N., Lorenz, M., Fetzer, C. W., Pietzuch, P. R., & Kapitza, R. (2016) · International Middleware Conference · doi:10.1145/2988336.2988350 · Cited by 126
Bugiel, S., Nürnberger, S., Pöppelmann, T., Sadeghi, A., & Schneider, T. H. (2011) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2046707.2046753 · Cited by 104
Lee, R., & Shi, W. (2013) · doi:10.1145/2487726 · Cited by 95
Self-citationSgxPectre Attacks: Leaking Enclave Secrets via Speculative Execution.Preprint
Chen, G., Chen, S., Xiao, Y. M., Zhang, Y., Lin, Z., & Lai, T. (2018) · arXiv (Cornell University) · Cited by 85
Xing, B. C., Shanahan, M., & Leslie-Hurd, R. (2016) · doi:10.1145/2948618.2954330 · Cited by 67
SoK: A Study of Using Hardware-assisted Isolated Execution Environments for Security
Zhang, F., & Zhang, H. (2016) · Proceedings of the Hardware and Architectural Support for Security and Privacy 2016 · doi:10.1145/2948618.2948621 · Cited by 49
Self-citationExploring the use of Intel SGX for Secure Many-Party Applications
Küçük, K. A., Paverd, A., Martin, A., Asokan, N., Simpson, A. C., & Ankele, R. (2016) · Workshop on System Software for Trusted Execution (SysTEX) · doi:10.1145/3007788.3007793 · Cited by 47
A Lightweight MapReduce Framework for Secure Processing with SGX
Pires, R. P., Gavril, D., Felber, P. A., Onica, E., & Pasin, M. (2017) · IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid) · doi:10.1109/ccgrid.2017.129 · Cited by 26
{AMD} x86 Memory Encryption Technologies
Kaplan, D. (2016) · Cited by 22
Secure Encrypted Virtualization is UnsecurePreprint
Du, Z., Ying, Z., Ma, Z., et al. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1712.05090 · Cited by 22
Snort Intrusion Detection System with Intel Software Guard Extension (Intel SGX)Preprint
Kuvaiskii, D., Chakrabarti, S., & Vij, M. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1802.00508 · Cited by 15
Oblivious Transfer from Any Non-trivial Elastic Noisy Channel via Secret Key Agreement
Cascudo, I., Damgård, I., Lacerda, F. G., & Ranellucci, S. (2016) · Lecture notes in computer science · doi:10.1007/978-3-662-53641-4_9 · Cited by 11
The Melbourne Shuffle: Improving Oblivious Storage in the CloudPreprint
Ohrimenko, O., Goodrich, M. T., Tamassia, R., & Upfal, E. (2014) · arXiv (Cornell University) · doi:10.48550/arxiv.1402.5524 · Cited by 6
Research works printed but not linked: 9
- Chia che Tsai , Donald E. Porter , and Mona Vij . 2017 . Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17) . USENIX Association, Santa Clara, CA, 645--658. https://www.usenix.org/conference/atc17/technical-sessions/presentation/tsai Chia che Tsai, Donald E. Porter, and Mona Vij. 2017. Graphene-SGX: A Practical Library OS for Unmodified Applications on SGX. In 2017 USENIX Annual Technical Conference (USENIX ATC 17). USENIX Association, Santa Clara, CA, 645--658. https://www.usenix.org/conference/atc17/technical-sessions/presentation/tsai
- Black Duck . 2018. Black Duck Open Hub. Black Duck Software , Inc . https://www.openhub.net/p?ref=homepage&query=xen. Black Duck. 2018. Black Duck Open Hub. Black Duck Software, Inc. https://www.openhub.net/p?ref=homepage&query=xen.
- Matthew Hoekstra , Reshma Lal , Pradeep Pappachan , Vinay Phegade , and Juan Del Cuvillo . 2013. Using innovative instructions to create trustworthy software solutions. HASP@ ISCA 11 ( 2013 ). Matthew Hoekstra, Reshma Lal, Pradeep Pappachan, Vinay Phegade, and Juan Del Cuvillo. 2013. Using innovative instructions to create trustworthy software solutions. HASP@ ISCA 11 (2013).
- Simon Johnson , Vincent Scarlata , Carlos Rozas , Ernie Brickell , and Frank Mckeen . 2016. Intel software guard extensions: EPID provisioning and attestation services. ser. Intel Corporation ( 2016 ). Simon Johnson, Vincent Scarlata, Carlos Rozas, Ernie Brickell, and Frank Mckeen. 2016. Intel software guard extensions: EPID provisioning and attestation services. ser. Intel Corporation (2016).
- D Kaplan . 2017. Protecting vm register state with sev-es. White paper , Feb ( 2017 ). D Kaplan. 2017. Protecting vm register state with sev-es. White paper, Feb (2017).
- David Kaplan , Jeremy Powell , and Tom Woller . 2016. AMD memory encryption. White paper , Apr ( 2016 ). David Kaplan, Jeremy Powell, and Tom Woller. 2016. AMD memory encryption. White paper, Apr (2016).
- Paul Kocher , Daniel Genkin , Daniel Gruss , Werner Haas , Mike Hamburg , Moritz Lipp , Stefan Mangard , Thomas Prescher , Michael Schwarz , and Yuval Yarom . 2018 . Spectre Attacks: Exploiting Speculative Execution. ArXiv e-prints (Jan. 2018). arXiv:1801.01203 Paul Kocher, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz, and Yuval Yarom. 2018. Spectre Attacks: Exploiting Speculative Execution. ArXiv e-prints (Jan. 2018). arXiv:1801.01203 · arXiv
- Kostya Kortchinsky . 2009 . Cloudburst: A VMware guest to host escape story. Black Hat USA (2009), 19. Kostya Kortchinsky. 2009. Cloudburst: A VMware guest to host escape story. Black Hat USA (2009), 19.
- Rafal Wojtczuk , Joanna Rutkowska , and Alexander Tereshkin . 2008. Xen Owning trilogy. Invisible Things Lab ( 2008 ). Rafal Wojtczuk, Joanna Rutkowska, and Alexander Tereshkin. 2008. Xen Owning trilogy. Invisible Things Lab (2008).
Cited by
Sorted by citations
On cloud security requirements, threats, vulnerabilities and countermeasures: A survey
Kumar, R., & Goyal, R. (2019) · Computer Science Review · doi:10.1016/j.cosrev.2019.05.002 · Cited by 264
The Security of Autonomous Driving: Threats, Defenses, and Future Directions
Ren, K., Wang, Q., Wang, C., Qin, Z., & Lin, X. (2019) · Proceedings of the IEEE · doi:10.1109/jproc.2019.2948775 · Cited by 223
Trusted Execution Environments: Properties, Applications, and Challenges
Jauernig, P., Sadeghi, A., & Stapf, E. (2020) · IEEE Security & Privacy · doi:10.1109/msec.2019.2947124 · Cited by 157
A survey of Intel SGX and its applications
Zheng, W., Wu, Y., Wu, X., Feng, C., Sui, Y., Luo, X., & Zhou, Y. (2020) · Frontiers of Computer Science · doi:10.1007/s11704-019-9096-y · Cited by 82
A comprehensive survey of hardware-assisted security: From the edge to the cloud
Coppolino, L., D’Antonio, S., Mazzeo, G., & Romano, L. (2019) · Internet of Things · doi:10.1016/j.iot.2019.100055 · Cited by 61
Metadata
- Authors
- Mofrad, S., Zhang, F., Lu, S., & Shi, W.
- Affiliations
- Wayne State University (US)
- University of Houston (US)
- Venue
- Proceedings of the 7th International Workshop on Hardware and Architectural Support for Security and Privacy
- Publisher
- ACM
- Published
- 2018-06-02
- Pages
- 1-8
- OpenAlex
- W2803185452
- Cited by
- 102
- References
- 36
- Citations by year
- 2026: 6 · 2025: 13 · 2024: 13 · 2023: 12 · 2022: 12 · 2021: 21 · 2020: 15 · 2019: 10
- FWCI
- 4.69
- Type
- conference paper
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- Locations
- Hardware and Architectural Support for Security and Privacy (publishedVersion, public-domain)
- Funders
- National Science Foundation (CICI-1738929, IIS-1724227, DGE 1433817)
- North Atlantic Treaty Organization (NATO Science for Peace and Security Programme (G4919))
- Topics
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › Distributed systems and fault tolerance
- Physical Sciences › Computer Science › Information Systems › Digital Rights Management and Security
- Keywords
- Intel SGX, trusted execution environments, hardware security, ARM TrustZone, system security, performance comparison, security comparison
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review