The safeguards map / 3.1 Execution sandboxes
Inclavare Containers
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A container runtime that launches protected containers in hardware trusted execution environments (enclaves) to keep an untrusted infrastructure provider away from workload data.
Where it sits
3.1 Execution sandboxes (primary): Launches containers inside hardware-assisted trusted execution environments (enclaves) so that the infrastructure provider cannot access the workload's data in use.
Inclavare Containers is an innovation of container runtime with the novel approach for launching protected containers in hardware-assisted Trusted Execution Environment (TEE) technology
captured
which can prevent the untrusted entity, such as Cloud Service Provider (CSP), from accessing the sensitive and confidential assets in use
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
- Policy comes from
- vendor defaults
- Can the agent bypass it
- depends
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The boundary protects the workload from the host, not the host from the workload.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.