The document discusses the growing problem of data breaches and the high costs they incur for companies like Yahoo, Equifax, and IBM. It then introduces SecureCloud as a project that aims to address this issue by utilizing Intel SGX to reduce a system's attack surface and provide more security for data and applications in the cloud. The presentation outlines SecureCloud's layered architecture and highlights some of its key results like secure cloud resources, tools, and templates to enable confidential processing of IoT and big data using technologies like Kubernetes and Spark. It also discusses plans to sustain and continue developing the project's work through products, services, research projects, and open source contributions.

1. Andrey Brito (Federal University of Campina Grande, Brazil)
Cloudscape Brazil – July 25th, 2018

2. SecureCloud – The problem
July 25th, 2018 Cloudscape Brazil 2
“IBM has found that the average
cost of a single data breach is
now $7.35 million in the U.S.”
theWeek, 2017
Yahoo is now finding that a 2013 breach
affected all of its three billion users
newscenter1, 2017
“[…] Equifax, their latest
breach putting over 145 million
Americans at risk of
compromise…”
newscenter1, 2017
The Equifax hack has already
cost the company $4 billion in
market value
theWeek, 2017

3. Challenge: lots of software
Attack Surface Today
Attack Surface with
Intel® SGX
OS
VMM
HARDWARE
OS
VMM
HARDWARE
Attack Surface
July 25th, 2018 Cloudscape Brazil 3

4. Layered architecture of SecureCloud
July 25th, 2018 Cloudscape Brazil 4

5. Results - Highlights
July 25th, 2018 Cloudscape Brazil 5
• Secure Cloud Resources
& OpenStack
• SCONE toolset
• SGX-aware Kubernetes
• Templates for
confidential data
processing of IoT data
• Application templates
for confidential big
data processing and
ETL
• Secure Key-Value Store
• Secure Pub-Sub (SCBR &
Hardened Kafka)
• TaLoS & LibSEAL
• SGX-Spark, MapReduce
and Secure K8s Jobs
High Level ServicesBasic Services Applications

6. Sustainability – Exploitation Plans
• Products & Services from industrial partners
– ChocolateCloud is about to release two products using results from
the Project
– CloudSigma has made modification in their cloud stack to offer SGX
resources
• Products & Services from start-ups
– Two start-ups offering consulting services and licensing of some
assets (SafePath & SCONTAIN)
July 25th, 2018 Cloudscape Brazil 6

7. Sustainability – Continuing development
• Results are being used by other research projects
– Horizon 2020 (4ª Coordinated Call & EU)
– EMBRAPII-supported projects with small & large companies
• Dissemination activities also used as prospection
• Github-based contributions that are being forked or continued
July 25th, 2018 Cloudscape Brazil 7

8. Thank you!
SecureCloud is a project of the 3rd
Brazil-Europa Coordinated Call
July 25th, 2018 Cloudscape Brazil 8
European Commission
Horizon 2020
Governo Federal
MCTIC – RNP – CTIC
Swiss Confederation
State Secretariat for Education,
Research and Innovation