DMCA
Architectural Support for Secure Virtualization under a Vulnerable Hypervisor (2011)
| Venue: | APPEARS IN THE 44 TH ANNUAL IEEE/ACM INTERNATIONAL SYMPOSIUM ON MICROARCHITECTURE (MICRO-44) |
| Citations: | 9 - 0 self |
BibTeX
@MISC{Jin11architecturalsupport,
author = {Seongwook Jin and Jeongseob Ahn and Sanghoon Cha and Jaehyuk Huh},
title = { Architectural Support for Secure Virtualization under a Vulnerable Hypervisor},
year = {2011}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Although cloud computing has emerged as a promising future computing model, security concerns due to malicious tenants have been deterring its fast adoption. In cloud computing, multiple tenants may share physical systems by using virtualization techniques. In such a virtualized system, a software hypervisor creates virtual machines (VMs) from the physical system, and provides each user with an isolated VM. However, the hypervisor, with a full control over hardware resources, can access the memory pages of guest VMs without any restriction. By compromising the hypervisor, a malicious user can access the memory contents of the VMs used by other users. In this paper, we propose a hardware-based mechanism to protect the memory of guest VMs from unauthorized accesses, even with an untrusted hypervisor. With this mechanism, memory isolation
Keyphrases
vulnerable hypervisor secure virtualization architectural support cloud computing virtual machine memory isolation malicious tenant malicious user full control share physical system promising future untrusted hypervisor physical system virtualization technique security concern memory page unauthorized access hardware-based mechanism fast adoption memory content hardware resource isolated vm virtualized system multiple tenant software hypervisor
