a ‘computational technique’ focused on securing data that is in use (in the RAM, caches, registers, CPU, or GPU memory)
if you think about it, digital data can either be (a) at rest, (b) in transit, or (c) in use. for each state, there are various security practices to protect the integrity and confidentiality of data
more and more of the world’s sensitive and valuable information is being processed on the cloud. there is a sort of trust problem here when you, the owner of said valuable information do not own the physical or virtual machines that is running your software. your cloud provider controls the hypervisor, the host OS, so how do you ensure that your cloud provider cannot see your data?
the proposed solution is Trusted Execution Enviroments (TEEs) that is comprised of a mixture of hardware, firmware, and software features