Skip to main content

As computing moves to span multiple environments—from on-prem to public cloud to edge computing—organizations need security controls that can safeguard sensitive intellectual property (IP) and workload data wherever the data resides. Highly regulated applications and mission critical applications need data protection through all its modalities—at-rest, in-transit and in-use, for companies to migrate the data to the cloud where there is a lack of control and visibility in a multitenant environment. As an industry we have generally figured out how to protect data at-rest, and, in-transit. Confidential Computing (CC) is an emerging industry paradigm focused on securing the data in-use.

Source: Intel IT Peer Network

Link: https://itpeernetwork.intel.com/confidential-computing/

Privacy and Confidential Computing Gains Momentum. Another approach to shoring up cybersecurity, particularly when addressing communications and data privacy, is confidential computing. The idea of confidential computing is to encrypt the entire computing process, not just the data, creating additional layers of security around sensitive information. Google, Microsoft, IBM, Alibaba, and VMware are helping develop new protocols and best practices by way of the Confidential Computing Consortium. The tech is still in a state of relative infancy, but we should begin to see confidential computing slide into the mainstream in 2021.

Source: Forbes

Link: https://www.forbes.com/sites/danielnewman/2020/09/21/top-10-digital-transformation-trends-for-2021/

Confidential computing — one of 33 technologies on the Gartner Hype Cycle for Cloud Security, 2020 — is a security mechanism that protects code and data from the host system. By making critical information invisible to third parties, including the host, it potentially removes the remaining barrier to cloud adoption for highly regulated businesses in the financial services, insurance and healthcare sectors.

Source: Gartner Hype Cycle for Cloud Security, 2020

Link: https://www.gartner.com/smarterwithgartner/top-actions-from-gartner-hype-cycle-for-cloud-security-2020

Enarx

Ben
Mike B.
Mike D.
Shaun
axel

Agenda

Events​

RSA conference​

Enarx should answer CFP, @mike_camel to do so.

OSS Europe​

Approved, we have (signed) contract. ConfC2 panel template being worked on (by Aeva).

DevConf US​

24/25th Sept, tech crowd Showing a cool new demo.

Confidential Computing Consortium​

Motion to allow two companies from the same group of companies (ie: IBM & Red Hat) to join the ConfC2: defeated. There are still (understandable) concerns that this could lead to undue influence on the board. However, it also a sign that boards often have too much power over the organisations, even the ConfC2 board is designed to avoid this sort of problem.

Outreach / Speaker Bureau​

A quote was accepted, the idea is now to start building the bureau, with several sub-groups. Not going with SpeakerHub for now, may do so later.

Enarx

Ben
Mike D.
Mike B.
Shaun
axel

Agenda

House keeping​

Move to meeting fortnightly?

  • yes

Use github issues to track tasks?

  • yes
    ACTION: @axelsimon to check with @mbestavros best way to do that

Events​

OSS Europe​

Waiting for news tomorrow.

Enarx short stories​

LinkedIn etc.

ACTION: ensure Enarx organisation exists @axelsimon
ACTION: create an issue to track creation of set of questions @m-dombrowski
ACTION: create one issue per interviewee @m-dombrowski

Confidential Computing Consortium​

Outreach bureau?​

Quote was too high in Ben's opinion. More to come.

Enarx

Mike D.
Ben
Shaun
Harald
axel

Agenda

OSS events​

Public communication channel​

We don't need our own Slack subscription, we can use the LF-provided one for OSS Europe.

Confidential C2​

Speaker Bureau​

Ben getting quote from Speakerhub. Good thing is people actually look for speakers on Speakerhub.

Action: create a Speakerhub (free), mention "confidential computing" in your profile.

Ben's proposal: let's start building a simple page (like LF Edge has). Start with leadership team, then go through communities.

New outreach whitepaper​

Will be released very soon.

Website​

Pages are being updated one at a time. Improve SEO by looking at analytics data.

Enarx short stories​

LinkedIn etc.
Aim: Consistent, concerted voice. Work together with Twitter feed and website.

What focus?
Recruitment? Spotlight on website? Technical aspect?
Up until now, the goal has been to improve understanding of the core problem & encourage people to join the community.

  • (Recruitment) Present relatable human element of project to target audience on this social media platform. Team member interviews similar to RH Summit?
  • (Website spotlight) Link to appropriate landing page(s) to direct traffic.
  • (Technical highlights) Coordinate with team to highlight interesting aspects of project.

Possible format: "3 questions with…"

Formal representation​

  • LinkedIn organisation (profile you can follow, adds credibility on platform)

Idea: have more ways to amplify the message

Enarx

Ben
Mike B
Mike D
axel

Agenda

Open Source Summit​

Slack channel considered useful, looking for a long-lived channel for conferences: using the LF-provided chat going forward.

Extra channel for the project​

Linkedin: simple blog posts (~200W)
Twitter being used more, including on the Confidential C2

Direct Outreach​

Confidential C2 Speaker Bureau​

Ben working on a proposal, possibly using SpeakerHub.
Ideally 2 sections: more technical and more business

Red Hat​

Getting better at telling a story around Enarx.
Work needed on Analyst Relations.

Enarx
  • Ben
  • Mike
  • Nick
  • Shaun

Agenda

General discussion​

Meetings​

Let's move the meetings to Jitsi so anyone can participate (no need to request access): https://meet.jit.si/EnarxOutreach

Blog​

Let's set up a blog for Enarx. Evaluating open source / SaaS options. Cross-promote blog entries (personal blogs and CCC).

CCC​

How can we further collaborate with the CCC on some initiatives? Examples include Hacktoberfest and Outreachy.

Hacktoberfest​

Start planning for Hacktoberfest: focus on building simple demos to demonstrate Enarx: https://github.com/enarx/outreach/issues/14

Outreachy​

Start planning for Outreachy, a diversity initiative that provides paid, remote internships: https://github.com/enarx/outreach/issues/15

Events​

Cloud Security Alliance​

Rolling CFP till 2021-December-31: https://www.cvent.com/c/abstracts/6e04faab-fd38-4df4-b2a3-2e2780b7c24b

Enigma / Usenix​

CFP till 2021-August-26: https://www.usenix.org/conference/enigma2021/call-for-participation

Enarx Sticker Design​

Added Enarx sticker design to the image assets: https://github.com/enarx/enarx.github.io/tree/master/assets/images

Meeting Index