Confidential Computing Transparency
<|reference_start|>Confidential Computing Transparency: Confidential Computing is a security paradigm designed to protect data in-use by leveraging hardware-based Trusted Execution Environments (TEEs). While TEEs offer significant security benefits, the need for user trust remains a challenge, as attestation alone cannot guarantee the absence of vulnerabilities or backdoors. To address this, we propose a Confidential Computing Transparency framework with progressive levels of transparency. This framework goes beyond current measures like open-source code and audits by incorporating accountability for reviewers and robust technical safeguards, creating a comprehensive trust chain. Our tiered approach provides a practical pathway to achieving transparency in complex, real-world systems. Through a user study with 400 participants, we demonstrate that higher levels of transparency are associated with increased user comfort, particularly for sensitive data types.<|reference_end|>
@article{kocaoğullar2024confidential,
    title={Confidential Computing Transparency},
    author={Ceren Kocaou{g}ullar, Tina Marjanov, Ivan Petrov, Ben Laurie, Al
  Cutter, Christoph Kern, Alice Hutchings, Alastair R. Beresford},
    journal={arXiv preprint arXiv:2409.03720},
    year={2024},
    archivePrefix={arXiv},
    eprint={2409.03720},
    primaryClass={cs.CR}
}