This talk is an overview of the newly released security product from Intel, Software Guard Extensions (SGX), and how it can be used to harden your sensitive algorithms and data from reverse engineering by your adversaries. SGX provides hardware enforced protection of secure enclaves in the application stack that are opaque to even the most privileged processes running on the platform including the OS, hypervisors, SMM, etc. SGX takes a "zero trust" approach to its implementation and runtime operation. SGX is implemented by the inclusion of 18 new instructions to the IA-32 Instruction Set and baked into the CPU via microcode. While not perfect, SGX will help us significantly raise the anti-reverse engineering bar.

hypervista spent a twenty-five year career at CIA as a Technical Operations Officer, field manager, and finally a senior software security researcher championing a joint research project between CIA and NSA before moving on to the private sector. He is currently a Solutions Architect at VMware, focused on National Security.

@hypervista

Back to Derbycon 2016 video list