The Taiwan Stock Exchange was looking to improve the security and trust of their cloud infrastructure. They worked with Intel to test Intel Trusted Execution Technology (TXT), which provides hardware-based security features. A proof of concept system was set up using TXT that demonstrated its ability to 1) verify the integrity of platform software and hardware at launch, 2) control VM placement based on platform trust levels, and 3) facilitate automated compliance reporting. The POC was successful in addressing the TWSE's requirements for enhanced visibility, control, and auditability in their cloud environment.

1. INTEL CONFIDENTIAL1
Building Trust and Security for
Taiwan Stock Exchange's Cloud
Infrastructure with
Intel® Trusted Execution Technology (TXT)
KH Li
APAC Solution Architect
Enterprise Solution Sales,
Intel Corp
Email: kuo-hui.li@intel.com

2. INTEL CONFIDENTIAL2
Taiwan Stock Exchange (TWSE)
Introduction
• Established on October 23rd, 1961
• Matching system ： FAST (Fully Automated Securities Trading)
since May 3rd,1993
• Listed Securities ： Stock， TDR， Warrant， Bond， ETF，…
• Trading information：
• Max Order Transaction ： 5,433,362.
• Max Match Transaction ： 2,087,695.
• Max Value ： NT$ 326,462,532,039 (~US$10.88B)
• Official website: http://www.twse.com.tw

3. INTEL CONFIDENTIAL3
TWSE Business and Technical Requirements
 Cloud infrastructure needs to provide secured systems and
trusted compute environments, including
 Greater visibility into the security states of the hardware platforms (root
of trust and platform attestations)
 Production of automated and standardized reports on the configuration
of the physical and virtual infrastructure
 Controls based on the physical location of the server and location of the
virtual machines (VMs) for the migration of these VMs onto acceptable
servers, per specified policy
 Collection of measured evidence that services infrastructure complies
with security policies and regulated data standards

4. INTEL CONFIDENTIAL4
Internet
Trusted Launch –
Verified platform
integrity
Trusted Pools
Compliance Support – enhancing
audit-ability of cloud environment
Trust and Security Use Models:
Protection, Visibility and Control
1
2
3
Control VMs based on platform
trust (and more) to better protect
data
Hardware enforced detection of
launch components —reduces
malware threat
Hardware support for compliance
reporting
1
2
3
Intel TXT- Addressing Trust & Compliance

5. INTEL CONFIDENTIAL5
TWSE TXT POC System Configuration

6. INTEL CONFIDENTIAL6
Use Cases: Addressing Trust & Compliance
Measured Boot & Attestation
TrustLevel:
Measured
Hypervisor
VMVM
Non-TXT
Platform
Hypervisor
VMVM
TXT Platform
TrustLevel:
Unknown
Trustable Pools & Secure Migration
Hypervisor
VMVM
Non-TXT
Platform
Hypervisor
VMVM
TXT
Platform
Hypervisor
VMVM
TXT Platform
Config
Mgmt
Policy
Enforce
Engine Audit & Report
SW ServicesMgm
t SW
Audit /Compliance Reporting
Hypervisor
VMVM
TXT Platform
1 2
3

7. INTEL CONFIDENTIAL7
POC Results
http://www.intel.com/content/dam/www/public/us/en/documents/white-papers/cloud-computing-txt-xeon-twse-whitepaper.pdf