Significance of Confidential Computing

The technology sector must constantly stay one step ahead of attackers.

Apac CIOOutlook | Wednesday, November 09, 2022

Trusted execution environments shield proprietary data against the very cloud providers that host it.

FREMONT, CA: The technology sector must constantly stay one step ahead of attackers. However, there is significant ambiguity regarding what is meant by confidential computing.

It is described by AWS as a specific piece of hardware and firmware that divides an interior, often client data, from an exterior, usually a cloud provider. It has features of tiered zero trust, enabling businesses that use cloud providers to further segment data according to security requirements. It can safeguard data while it's being used and strike a balance between sharing and control over the data.

Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.

An effort to develop more secure hardware-based execution environments is confidential computing. It is frequently used to safeguard data being used in many situations. Most people agree that securing data while at rest or in transit is simpler than doing so while it is being used. IEEE claims that the contradiction is the issue.

The Confidential Computing Consortium established standards in 2020 by working on its Technical Advisory Council. Several businesses, including Meta (NASDAQ: META), Google (NASDAQ: GOOGL), Huawei, IBM (NYSE: IBM), Microsoft (NASDAQ: MSFT), and Tencent (HKG: 0700), provided their inputs.

Confidential computing can reduce energy consumption by storing high-bandwidth or high-latency data, such as video, in the TEE rather than locally. It could also enable various businesses to share data sets without granting full access.

The TEE is a secure portion of a CPU divided by embedded encryption keys that are only accessible by approved application code. The data remains invisible during calculation and decryption, not even to the operating system or hypervisor. It can be used to safeguard analytics operations or AI/ML algorithms in addition to proprietary business logic and apps.

One of the objectives of cloud service providers who also offer confidential computing is to give their clients peace of mind regarding the cloud provider's access to secret data.

The Google Cloud uses private virtual machines supported by 3rd generation AMD EPYC CPUs and secures encrypted virtualization extensions. The CPU generates and manages node-specific, dedicated keys, which are security keys generated within the hardware during node construction, to keep data encrypted in memory.

Starting with IBM Cloud's Hyper Protect Services and Data Shield in 2018, IBM claims to be on the fourth generation of its secure computing offerings. A cloud hardware security module that has achieved FIPS 140-2 Level 4 certification is proudly included with Hyper Protect services. Both goods have ratings for laws, including HIPAA, GDPR, ISO 27K, and others.

Additionally, IBM offers HPC Cluster, a section of its cloud service where clients can secure their clusters utilising their encrypted operating system and keep their key options. Customers may host a sizable number of Linux workloads inside a TEE to IBM's Secure Execution for Linux solution.

Elastic Cloud Compute, an infrastructure-on-demand service that, by its very nature, necessitates some barriers and doors between Amazon and the user using the services, is supported by AWS's Nitro System. They employ several techniques to build those walls and doors. The Nitro System is one example; it features a unique security chip that cryptographically measures and certifies the system.

The hardware-based security offered by this business is aided by Intel's (NASDAQ: INTC) Software Guard Extensions. They concentrated on offering TEE services designed for the government, financial, and healthcare sectors in 2021.

More in News

IoT and AI: The Key Technologies Transform Transport Management

AI and IoT have been transforming every industrial domain today. Be it manufacturing, communication, energy, defense or consumer products, AI and IoT have been steering the world to embrace digitalization at every step. Quite similarly, these two technologies have been also transforming transport management in many ways, some of which are listed below. The first application that needs mention is inventory and warehouse management. In this era of globalization, warehouses storing a particular firm’s inventory may not be located at a nearby site to the head office and managing incoming and outgoing goods might become difficult. An array of sensors at the warehouses connected to the firm’s TMS (Transport Management System) in combination with AI algorithms can provide a comprehensive overview of their inventory with complete data analysis. This would also minimize costs by automating mundane manual tasks. The next significant area that needs mention is order processing. Through on-site kiosks, order placing and acceptance can be seamlessly automated. Payments can also be transferred easily from anywhere and a firm can deploy AI solutions to have anaccurate viewof the financial and transactional workflows. The third and final aspect is logistics and shipping. Upon placing an order or receiving one, IoT sensors can provide real-time tracking of the goods shipped via any transport medium till they are delivered to the relevant customers. AI algorithms can provide key performance metrics at every step, point out the loopholes of the entire transport management process, and assist firms to improve their services manifolds. ...Read more

The Role of Big Data in Tourism Analytics

Big data has revamped operations and reshaped how businesses interact with consumers in the tourism and hospitality sectors. Big data analytics allows travel companies to process large volumes of information, derive actionable insights, and significantly improve service delivery. Big data is crucial in analyzing travel patterns, offering businesses valuable insights into traveler behaviors, preferences, and movement trends. Data from mobile devices, location services, and online travel searches enables tourism boards and travel agencies to derive actionable intelligence. By analyzing GPS and mobile data, businesses can identify popular destinations, monitor visitor flows, and assess seasonality in travel. Online reviews and interactions reveal customer preferences, allowing companies to tailor services accordingly. Additionally, AI-driven algorithms process user data to generate personalized itineraries, enhancing the overall travel experience. Powered by big data, predictive analytics is transforming the tourism industry by enabling real-time trend identification. Hotels, airlines, and tour operators leverage historical data to forecast demand spikes during peak seasons, festivals, and special events, allowing dynamic pricing adjustments. Social media analysis helps businesses identify emerging travel hotspots, creating opportunities for early market entry. Furthermore, big data supports health-related travel forecasting, as seen in pandemic tracking and decision-making during COVID-19. Enhancing customer experience is a significant benefit of big data in tourism. AI-driven tools analyze past booking behaviors, enabling businesses to offer personalized recommendations that boost customer satisfaction and engagement. Real-time feedback from review platforms helps companies quickly address operational inefficiencies. Furthermore, seamless travel experiences are facilitated through automated check-ins and AI-powered virtual assistants, ensuring efficient, hassle-free interactions. By incorporating big data analytics, the travel industry can not only enhance operational efficiency and service quality but also anticipate evolving consumer demands. Circlace , for instance, helps businesses integrate big data to refine customer journeys and streamline operations. As artificial intelligence and machine learning evolve, big data applications in the tourism industry are set to reach new heights. Some emerging trends are predictive and prescriptive analytics, real-time insights through IoT devices, and blockchain-enabled secure transactions. These advancements are expected to further enhance the tourism ecosystem by offering smarter, more sustainable, and highly efficient solutions. I-ESG provides solutions that leverage big data analytics to optimize sustainability efforts and enhance operational efficiency in the tourism industry. Big data is undeniably a key driver in transforming the tourism industry. From analyzing travel behaviors to personalizing customer experiences, it has streamlined operations and empowered businesses to make data-driven decisions. While challenges remain, the benefits outweigh the hurdles, and the future of tourism analytics, with big data at its core, is promising. ...Read more

Top Cyber Experts Gather in Kuala Lumpur for the AI & Cybersecurity Leaders Summit: ASEAN 2026

KUALA LUMPUR, Malaysia – As organisations across Southeast Asia rapidly adopt artificial intelligence to drive innovation, they simultaneously face an unprecedented wave of sophisticated, AI-driven cyber threats and ransomware. To address this critical inflection point, the AI & Cybersecurity Leaders Summit: ASEAN 2026 will take place on August 6, 2026 in Kuala Lumpur, Malaysia . Organised by Global Engage and supported by CyberSecurity Malaysia, this premier regional summit serves as Asia’s frontline defence strategy session. It brings together senior public and private sector leaders, Chief Information Security Officers (CISOs), and technology innovators to bridge the gaps in capability, talent and regional regulation. Key themes • The AI Double-Edged Sword: Weaponised LLMs, deepfakes, and building cyber resilience at machine speed • Emerging Risks & Opportunities: Navigating the 2026 threat horizon and securing vulnerable cloud architectures • Boardroom Management: Helping CISOs translate technical cyber risks into tangible financial impacts for executive boards • From Defence to Resilience: Redefining business continuity, operationalising recovery at scale, and driving digital trust • The Regional Blueprint: Navigating ASEAN data sovereignty laws, AI safety regulations, and executive accountability Featuring ASEAN’s Leading Cybersecurity Voices Attendees will gain exclusive insights from an elite lineup of regional experts and industry pioneers, including: • Suresh Sankaran Srinivasan – Group Head of Cyber Security and Data Privacy, Axiata Group Berhad (Malaysia) • Devki Gaurav Pal – Head of Cyber Security Operations, Lazada and Alibaba International Digital Commerce (Singapore) • Robert S. Paguia – Division Chief, Cybercrime Investigation and Coordination Centre (The Philippines) • Daniel Liu – Group CISO, Pacific Healthcare Group (Thailand) • Fazlan Abdullah – Head of Pre-Emptive Technology & Services Division, CyberSecurity Malaysia (Malaysia) • ...and many other influential CISOs and senior leaders from across the region. Website : https://www.ai-cyberleaders.com/ ...Read more

Blockchain: Ensuring EHR Safety

The world is getting digitalized and so is every asset in it. Internet of Things (IoT) has helped the world evolve digitally and has certainly modernized healthcare. With healthcare being one of the most prioritized aspects of the global stage, it is quintessential to manage this industry with ease and versatility. The evolution of digital data records has revolutionized the field of storing medical data that has aided the healthcare industry in many ways. The digitalization of health care involves maintenance of EHRs (Electronic Health Records) which are generally stored in digital platforms, data centers and servers of the health care centers. These records aim at providing timely access to information to accelerate the fast recovery of patients. However, these records are vulnerable to breaches. According to a recent survey, about 72 percent of the employees are willing to share these confidential data tracks and many do not even know that this may cause security risks. It is advised to keep this data classified. Attackers often find ways to break through basic security protocols and cause an average annual loss of 6.2 billion dollars. To address this predicament, blockchains are implemented. Blockchains store data in the form of blocks and stack them one over the other cryptographically. This encrypts the data and keeps EHRs safe. When blockchains are put to use, data is retained in the decentralized network of nodes and encrypted using AES256-GCM with a 256-bit key for every 128-bit block of data. The decentralized nature of the blockchain ensures data integrity as there is no single point of failure. A shared system is employed to store data, which lets the associated stakeholders access information smoothly and without any forced digital blockage. More research is being done to prevent EHRs from being breached. With a more reliable and secure way of storing data, it is only a matter of time before EHRs become absolutely impregnable. ...Read more