2024/11/02 by Kosei Akama, Yoshimichi Nakatsuka, Akama, Kosei +6
Computer Science · #Advanced Malware Detection Techniques #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Network Security and Intrusion Detection #Web Application Security Vulnerabilities
paper · pdf · doi:10.48550/arxiv.2411.01340
openalex publication_date 2024/11/02 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28
Data theft and leakage, caused by external adversaries and insiders, demonstrate the need for protecting user data. Trusted Execution Environments (TEEs) offer a promising solution by creating secure environments that protect data and code from such threats. The rise of confidential computing on cloud platforms facilitates the deployment of TEE-enabled server applications, which are expected to be widely adopted in web services such as privacy-preserving LLM inference and secure data logging. One key feature is Remote Attestation (RA), which enables integrity verification of a TEE. However, compatibility issues with RA verification arise as no browsers natively support this feature, making prior solutions cumbersome and risky. To address these challenges, we propose RA-WEBs (Remote Attestation for Web services), a novel RA protocol designed for high compatibility with the current web ecosystem. RA-WEBs leverages established web mechanisms for immediate deployability, enabling RA verification on existing browsers. We conduct a comprehensive security analysis, demonstrating RA-WEBs's resilience against various threats. Our contributions include the RA-WEBs proposal, a proof-of-concept implementation, an in-depth security analysis, and publicly available code for reproducible research.