USER MODE HEAP SWAPPING

摘要

In an example, there is disclosed a computing apparatus, including a processor, including a trusted execution instruction set; a memory having an enclave portion, wherein the enclave is accessible only via the trusted execution instruction set; a swap file; and a memory management engine operable to: allocate a buffer within the enclave; receive a scope directive to indicate that the buffer is in scope; and protect the buffer from swapping to the swap file while the buffer is in scope. There is further disclosed an method of providing a memory management engine, and one or more computer-readable storage mediums having stored thereon executable instructions for providing the memory management engine.

主权项

1. A computing apparatus, comprising:
a processor to provide a trusted execution instruction set; a memory having an enclave portion, wherein the enclave is accessible only via the trusted execution instruction set; a swap file; and one or more logic elements comprising a memory management engine operable to:
allocate a buffer within the enclave;receive a scope directive to indicate that the buffer is in scope; andprotect the buffer from swapping to the swap file while the buffer is in scope.