Intel SGX

Strong Confidential Serverless Containers are serverless containers where inside each container runs a TEE for the application to provide the strongest isolation possible. So the main focus will be to provide the best isolation of running code. This is only possible with Intel SGX without additional security risks, which is shown in Design Decision. Thus, strong serverless containers refer only to Intel SGX. The assumption is, that infiltrating an enclave is hard. Vulnerabilities within SGX's architecture are considered out of scope. In this thesis it is assumed that an enclave has no fatal vulnerabilities.