Path towards the vision of confidential clouds
summary
Claim: within 7–10 years all clouds become confidential clouds with 70–75%+ of cloud apps running in TEEs. Path requires about eight technical and operational pillars; the first five are urgent: pervasive confidential compute across CPUs, GPUs (H100), FPGAs and accelerators; scalable, highly available attestation verification services (CSP, third‑party, DIY models) with multi‑cloud support; integrated key brokering and distribution tied to attestation so keys inject into TEEs only after policy checks; plus benchmarks, governance and telemetry to adapt shared‑responsibility models.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:53Confidential Clouds - assertion
- 1:24What are Confidential Clouds?
- 3:34What are we really saying?
- 5:08Key Requirements for Operationalizing Confidential Clouds
- 5:47Pervasive Availability of CC infrastructure
- 8:02Attestation Verification Services
- 11:10Policy-based Key brokering & distribution
- 13:33Governance
related talks
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
23mIntegrating Confidential Computing Into Cloud Infrastructure: Challenges and Opportunities
27mConfidential Tenancy: Towards Digital Sovereignty on Public Clouds
11mLightning Talk: Computing Confidentially in the Clouds
13mVM Security with Confidential Computing
31mConfidential Containers – Sensitive Data and Privacy in Cloud Native Environments
49mCloud Security Made for the EU: Securing Data & Applications
13mNext-Gen Cloud: Enabling Secure and Seamless Cross