Graphene-SGX
E653459
Graphene-SGX is a library OS and runtime environment that enables unmodified Linux applications to run securely inside Intel SGX enclaves with minimal porting effort.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Graphene-SGX canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T7279160 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Graphene-SGX Context triple: [Intel SGX, softwareSupport, Graphene-SGX]
-
A.
Intel SGX
Intel SGX is a hardware-based security technology that enables the creation of protected enclaves in memory to run sensitive code and data in isolation from the rest of the system.
-
B.
SG-CAN
SG-CAN is the executive body of the Andean Community responsible for coordinating and implementing the regional bloc’s policies and integration initiatives.
-
C.
Trusted Execution Environment
A Trusted Execution Environment (TEE) is a secure area of a main processor that runs isolated code and protects sensitive data from the rest of the system, even if the operating system is compromised.
-
D.
Qualcomm Secure Execution Environment
Qualcomm Secure Execution Environment is a hardware-backed trusted execution environment on Qualcomm chipsets that isolates sensitive code and data to enhance device security.
-
E.
Tensor G3 chip
The Tensor G3 chip is Google's custom third-generation mobile processor designed to power Pixel devices with advanced AI, machine learning, and efficiency-focused performance.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Graphene-SGX Target entity description: Graphene-SGX is a library OS and runtime environment that enables unmodified Linux applications to run securely inside Intel SGX enclaves with minimal porting effort.
-
A.
Intel SGX
Intel SGX is a hardware-based security technology that enables the creation of protected enclaves in memory to run sensitive code and data in isolation from the rest of the system.
-
B.
SG-CAN
SG-CAN is the executive body of the Andean Community responsible for coordinating and implementing the regional bloc’s policies and integration initiatives.
-
C.
Trusted Execution Environment
A Trusted Execution Environment (TEE) is a secure area of a main processor that runs isolated code and protects sensitive data from the rest of the system, even if the operating system is compromised.
-
D.
Qualcomm Secure Execution Environment
Qualcomm Secure Execution Environment is a hardware-backed trusted execution environment on Qualcomm chipsets that isolates sensitive code and data to enhance device security.
-
E.
Tensor G3 chip
The Tensor G3 chip is Google's custom third-generation mobile processor designed to power Pixel devices with advanced AI, machine learning, and efficiency-focused performance.
- F. None of above. chosen
Statements (37)
| Predicate | Object |
|---|---|
| instanceOf |
library operating system
ⓘ
runtime environment ⓘ software project ⓘ |
| abbreviation | Graphene-SGX NERFINISHED ⓘ |
| basedOn | Graphene NERFINISHED ⓘ |
| category |
application sandboxing framework
ⓘ
confidential computing framework ⓘ trusted execution environment software ⓘ |
| compatibleWith | Intel SGX SDK NERFINISHED ⓘ |
| deploymentModel | user-space library OS ⓘ |
| feature |
file system shielding
ⓘ
library OS abstraction ⓘ minimal porting effort for existing applications ⓘ network shielding ⓘ remote attestation support ⓘ shielded execution ⓘ system call interposition ⓘ |
| goal | enable secure execution of applications inside Intel SGX enclaves ⓘ |
| implements | shielded execution environment for Intel SGX ⓘ |
| license | open source license ⓘ |
| origin | academic research project ⓘ |
| programmingLanguage |
C
ⓘ
C++ ⓘ |
| relatedTo |
Graphene project
NERFINISHED
ⓘ
Intel SGX NERFINISHED ⓘ |
| requires |
Intel SGX-capable CPU
ⓘ
SGX-enabled BIOS or firmware ⓘ |
| runsOn | Intel SGX enclaves ⓘ |
| securityProperty |
confidentiality of in-enclave data
ⓘ
integrity of in-enclave computation ⓘ isolation from untrusted host OS ⓘ |
| supportsApplicationType | unmodified Linux applications ⓘ |
| supportsOperatingSystem | Linux ⓘ |
| supportsPlatform | Intel Software Guard Extensions NERFINISHED ⓘ |
| useCase |
confidential computing
ⓘ
running legacy Linux applications in SGX enclaves ⓘ secure cloud execution ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Graphene-SGX Description of subject: Graphene-SGX is a library OS and runtime environment that enables unmodified Linux applications to run securely inside Intel SGX enclaves with minimal porting effort.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.