NOVA
Top Cited Papers
- 13 April 2010
- proceedings article
- Published by Association for Computing Machinery (ACM)
- p. 209-222
- https://doi.org/10.1145/1755913.1755935
Abstract
The availability of virtualization features in modern CPUs has reinforced the trend of consolidating multiple guest operating systems on top of a hypervisor in order to improve platform-resource utilization and reduce the total cost of ownership. However, today's virtualization stacks are unduly large and therefore prone to attacks. If an adversary manages to compromise the hypervisor, subverting the security of all hosted operating systems is easy. We show how a thin and simple virtualization layer reduces the attack surface significantly and thereby increases the overall security of the system. We have designed and implemented a virtualization architecture that can host multiple unmodified guest operating systems. Its trusted computing base is at least an order of magnitude smaller than that of existing systems. Furthermore, on recent hardware, our implementation outperforms contemporary full virtualization environments.Keywords
This publication has 23 references indexed in Scilit:
- Verifying the Microsoft Hyper-V Hypervisor with VCCPublished by Springer Nature ,2009
- Improving Xen security through disaggregationPublished by Association for Computing Machinery (ACM) ,2008
- Accelerating two-dimensional page walks for virtualized systemsPublished by Association for Computing Machinery (ACM) ,2008
- OvershadowPublished by Association for Computing Machinery (ACM) ,2008
- SecVisorPublished by Association for Computing Machinery (ACM) ,2007
- A comparison of software and hardware techniques for x86 virtualizationPublished by Association for Computing Machinery (ACM) ,2006
- Reducing TCB complexity for security-sensitive applicationsPublished by Association for Computing Machinery (ACM) ,2006
- Xen and the art of virtualizationPublished by Association for Computing Machinery (ACM) ,2003
- The performance of μ-kernel-based systemsPublished by Association for Computing Machinery (ACM) ,1997
- On micro-kernel constructionPublished by Association for Computing Machinery (ACM) ,1995