VM Security with Confidential Computing
summary
Cloud VMs use AMD SEV SNP and Intel TDX to encrypt VM memory and create hardware-enforced trust domains with TPM 2.0 measured boot and PCRs for remote attestation. Adoption metrics cite 94% enterprise cloud use and ~75% confidential data; TE overhead measures 2–10% and attestation adds hundreds of ms but can be cached. Practical deployments integrate trusted launch into CI/CD, enable confidential AI and multi‑party analytics, and map controls to PCI DSS 4.0, HIPAA, and GDPR.
AI-written summary · about
chapters (9)
- 0:00Introduction and Importance of Cloud Security
- 1:42Understanding Confidential Computing
- 3:09Leading TEE Technologies
- 4:22Practical Applications of Confidential Computing
- 5:09Exploring Trusted Launch
- 8:11Implementing Zero Trust Architecture
- 10:18Regulatory and Performance Considerations
- 11:32Future Innovations in Cloud Security
- 12:23Conclusion and Final Thoughts
related talks
44mAdvancements in Confidential Computing
36mConfidential VMs in the cloud
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
11mLightning Talk: Computing Confidentially in the Clouds
23mAMD SEV & Azure Local: When Confidential VMs Go Local
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
45mConfidential Computing: Protecting Customer Data in the Cloud