Intel® SGX : What is it & How does it protect iExec Applications?

Intel® SGX (Software Guard Extensions) is a set of CPU instruction codes from Intel that allows user-level code to allocate private regions of memory, called enclaves, which are protected from processes running at higher privilege levels. It means that even higher privileged systems — such as root, kernel or hypervisor — cannot access the application running inside an enclave.