HETCOM: Heterogeneous Container Migration Based on TEE- or TPM-established Trust

In Cyber-Physical Systems such as Smart Factories, containers are an important building block. In the event of an attack, it is crucial that affected containers can be migrated to a sandboxed environment for further analysis. Containers not affected need to be moved out of reach of the attacker. In this scenario, migration procedures need strong protection, involving protocol and architectural aspects. We therefore propose HETCOM, a holistic approach to secure container migration in heterogeneous computing environments in the presence of strong attackers. HETCOM provides a portable platform architecture for cloud and edge nodes offering primitives that are leveraged by the migration protocol we propose. Additionally, container data is bound to the node's TEE on edge nodes. Thereby, HETCOM achieves secure container migration procedures and protection of sensitive container data on-transit.