Privacy preserving introspection for trusted execution environments

A method comprising:

• provisioning a trusted execution environment (TEE) with a workload, wherein the workload includes an introspection module;
• executing, by the introspection module, an introspection command according to an introspection policy, the introspection command configured to validate at least one memory access associated with the workload;
• and
• determining, by the introspection module, a status of a result of the introspection command, wherein the status is one of a failure status and a success status.

A system comprising:

• a memory;
• a processor in communication with the memory;
• a trusted execution environment (TEE), wherein the TEE is provisioned with a workload;
• and
• a runtime executing within the TEE, wherein the runtime is configured to:
• load a pre-generated memory accessing code into the TEE, wherein the code is supplied by an owner,
• receive introspection commands through an introspection channel, wherein the introspection channel is created between the runtime and the owner,
• execute the introspection commands, wherein the introspection commands are configured to validate a memory access in the pre-generated code, and
• determine a status of a result of the introspection commands, wherein the status is one of a failure status and a success status.