SCONE threat model Assume a powerful and active adversary who has superuser access and also access to the physical hardware Attackers can control entire software stack Assume that container service were not designed with the above privileged attacker model in mindSCONE, threat model • Assume a powerful and active adversary who has superuser access and also access to the physical hardware. • Attackers can control entire software stack. • Assume that container service were not designed with the above privileged attacker model in mind