Skip to content

The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.

InfoResearchPeer-reviewed

HiveTEE: Scalable and Fine-Grained Isolated Domains With RME and MTE Co-Assisted

Published
Record updated

Summary

HiveTEE is an intra-TEE isolation architecture built on Arm's Realm Management Extension (RME) and Memory Tagging Extension (MTE). It lets developers split an application into multiple isolated domains (SDoms), so a compromise in one part does not spread across the whole Confidential Compute Architecture (CCA) TEE. The authors applied it to OpenSSL, SQLite and Memcached and report less than 3% performance overhead.