Confidential Computing
Confidential computing is a cloud computing technology that protects data during processing.
- new and emerging focus for organizations operating in extremely secure environments
- e.g., military and defense sector
- extends security throughout the computing process
- In normal client-server computing model,
- client may request server to take action on client’s behalf
- server might have to access some data that is maintained in a separate storage environment, then perform some processing on it
- to secure this, we apply encryption to data on the storage devices and to network communication
- but typically do not address data actively processed
- adds protection for data and code in memory with Trusted Execution Environments (TEE)
- these environments guarantee no outside process can view or alter data being handled within the environment
- adds additional assurance that data is protected throughout all stages of the computing life cycle