{
  "slug": "iceclave",
  "term": "IceClave",
  "aliases": [],
  "definition": "IceClave is a research trusted execution environment that isolates offloaded SSD programs from flash-management code and other in-storage programs.",
  "note": "The design exposes cached address mappings read-only in a protected region, while keeping FTL updates and runtime metadata in the secure world. Reading a mapping does not authorize flash access: a dedicated permission-checking process gates requests using per-entry program identities. [iceclave-paper]\n\nA missing cached mapping still redirects translation to the FTL in the secure world. The optimization avoids some transitions, not all mapping work. [iceclave-paper]\n\nThe study combines a gem5/SimpleSSD/USIMM simulator with an OpenSSD Cosmos+ prototype for selected core functions; these are different evidence sources, not a commercial-device certification. [iceclave-paper]",
  "status": "research",
  "advantages": [],
  "limitations": [
    {
      "text": "The threat model trusts device vendors and assumes secure program delivery; software side-channel attacks are excluded.",
      "citationIds": [
        "iceclave-followup"
      ]
    }
  ],
  "related": [
    "computational-storage",
    "ftl"
  ],
  "supersedes": [],
  "supersededBy": [],
  "firstSeen": null,
  "lastSeen": null,
  "updated": "2026-11-14",
  "citations": [
    {
      "id": "iceclave-paper",
      "title": "Kang et al. IceClave: A Trusted Execution Environment for In-Storage Computing. MICRO 2021, pp. 199-211, sections 3-6; DOI 10.1145/3466752.3480109.",
      "url": "https://jianh.web.engr.illinois.edu/papers/iceclave-micro2021.pdf",
      "accessed": "2026-11-14"
    },
    {
      "id": "iceclave-followup",
      "title": "Xue et al. Building A Trusted Execution Environment for In-Storage Computing. Author follow-up, arXiv:2205.06361v1, sections 2-3 (2022).",
      "url": "https://arxiv.org/html/2205.06361v1",
      "accessed": "2026-11-14"
    }
  ],
  "provenance": [
    "Primary-source synthesis, not an executed prototype, hardware security audit or reproduced performance result."
  ]
}