Skip to Main content Skip to Navigation
Conference papers

Improving Virtualization Security by Splitting Hypervisor into Smaller Components

Abstract : In cloud computing, the security of infrastructure is determined by hypervisor (or Virtual Machine Monitor, VMM) designs. Unfortunately, in recent years, many attacks have been developed to compromise the hypervisor, taking over all virtual machines running above the hypervisor. Due to the functions a hypervisor provides, it is very hard to reduce its size. Including a big hypervisor in the Trusted Computing Base (TCB) is not acceptable for a secure system design. Several secure, small, and innovative hypervisor designs, e.g., TrustVisor, CloudVisor, etc., have been proposed to solve the problem. However, these designs either have reduced functionalities or pose strong restrictions to the virtual machines. In this paper, we propose an innovative hypervisor design that splits hypervisor’s functions into a small enough component in the TCB, and other components to provide full functionalities. Our design can significantly reduce the TCB size without sacrificing functionalities. Our experiments also show acceptable costs of our design.
Document type :
Conference papers
Complete list of metadata
Contributor : Hal Ifip <>
Submitted on : Thursday, June 8, 2017 - 11:06:22 AM
Last modification on : Thursday, October 18, 2018 - 6:06:02 PM
Long-term archiving on: : Saturday, September 9, 2017 - 12:32:13 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Wuqiong Pan, Yulong Zhang, Meng Yu, Jiwu Jing. Improving Virtualization Security by Splitting Hypervisor into Smaller Components. 26th Conference on Data and Applications Security and Privacy (DBSec), Jul 2012, Paris, France. pp.298-313, ⟨10.1007/978-3-642-31540-4_23⟩. ⟨hal-01534758⟩



Record views


Files downloads