The Guard's Dilemma - Efficient Code-Reuse Attacks Against Intel SGX

Explore a 23-minute conference talk from USENIX Security '18 that delves into novel exploitation techniques against Intel Software Guard Extensions (SGX). Learn about the vulnerabilities in SGX that can be exploited without kernel privileges or causing enclave crashes, even in the presence of existing randomization approaches like SGX-Shield. Understand the concept of the Guard's Dilemma, the CONT primitive, and how these attacks can be applied to enclaves developed with the standard Intel SGX SDK on both Linux and Windows. Gain insights into the potential security risks associated with SGX and the proposed mitigations to address these vulnerabilities.