Course Overview
This course covers the security challenges and privacy concerns associated with public cloud container deployment. It explores how to secure data and secrets in multi-cloud environments using Intel SGX containers and the hybrid trust model for container deployment. The course also delves into confidential container services and solutions offered by public cloud and open-source projects, including Azure Enclave Aware Container, Inclavare Containers, and SCONE. Students will learn about the benefits and challenges of public cloud container deployment, how to secure sensitive data in a cloud environment, and how to use Intel SGX technology to create isolated enclave environments. The course also covers the use of Occlum, a memory-safe, multi-process library OS for Intel SGX, and the Enclave Attestation Architecture (EAA) for remote attestation. By the end of the course, students will have a comprehensive understanding of how to secure containers for privacy in a multi-cloud environment.