Explore the intricacies of securing Linux virtual machine boot processes using AMD Secure Encrypted Virtualization (SEV) measurement in this informative conference talk. Delve into the challenges faced in Confidential Computing settings and understand the vulnerabilities present in VM boot processes with -kernel. Learn about the innovative solution involving a Hashes GUIDed table and its implementation to mitigate host attacks. Discover the current status of this security measure, methods for accessing injected secrets, and gain insights into future plans for enhancing VM boot security. This presentation, delivered by experts from IBM Research, offers valuable knowledge for professionals working in virtualization, cloud computing, and cybersecurity.
Securing Linux VM Boot with AMD SEV Measurement
Overview
Syllabus
Intro
Work of many people
Confidential Computing setting
The problem
AMD SEV
VM boot process with -kernel
Host attack on boot with -kernel
Vulnerability
Hashes GUIDed table
Solution details
Attack mitigation
Caveat
Implementation status
Accessing injected secrets
Future plans
Taught by
Linux Foundation
Tags
Related Courses
-
Zero-Trust vTPM for AMD SEV-SNP Confidential Virtual Machines
-
AMD SEV-TIO - Trusted I/O for Secure Encrypted Virtualization
-
AMD SEV-SNP Attestation - Establishing Trust in Guests
-
Remote Attestation in AMD SEV-SNP Confidential VMs
-
Providing Confidential Guest Services with a Secure VM Service Module on AMD
