Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX

This is a research prototype version of Occlum, a memory-safe, multi-process Library OS for Intel SGX. The archive contains the Library OS itself, LLVM-based implementation of MPX-based, Multi-Domain Software Fault Isolation (MMDSFI), and some benchmarks.

This archive is intended to support the ideas and validate the results presented in the Occlum paper (to be) published on ASPLOS'20. It is not ready for use in production. And some components/features (e.g., the MMDSFI verifier) are not open sourced, thus not included in this archive. We recommend users to visit https://github.com/occlum/occlum for the latest version of Occlum.