Confidential Computing
Confidential computing protects data while it is being processed by running the workload inside a hardware-isolated enclave, such as Intel SGX or AMD SEV, that the host operating system cannot read.
What is Confidential Computing?
Definition
Confidential Computing protects data while it is in use, not only at rest and in transit, by running the workload inside a hardware-isolated enclave that the host operating system and hypervisor cannot read. Intel SGX, AMD SEV and equivalent features on other processors provide the isolation, and remote attestation lets a third party verify which code is actually running inside the enclave before any data is sent to it. The practical use is straightforward: running a workload on infrastructure whose operator you do not fully trust.
Role in cybersecurity
Confidential Computing plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.