SecureServe: Multi-level Secure Server Virtualization Platform
summary
SecureServe claims a high‑assurance XenServer platform by moving vulnerable services out of dom0 and into isolated driver domains, enforcing dom0 disaggregation and XSM mandatory access control, and adding measured boot/TPM attestation. A prototype on XenServer 6.2 already runs a network driver domain (Open vSwitch or bridge) and a storage domain (iSCSI or local SATA); a qemu stub domain and dynamic XSM remain in development. Project defines and validates static XSM policies, targets thousands of VMs, and plans a prototype release by year end.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 1:14Agenda
- 1:35Goals
- 3:50Scenario
- 5:23Current State
- 7:32Controlled Information Sharing
- 8:46Threat Landscape
- 9:50Vulnerabilities
- 10:21Project Objectives
- 12:01Technical Requirements
- 12:59De disaggregation
- 14:03Mandatory access controls
- 14:53Is it overkill
- 15:16Vulnerability
- 16:15Dis disaggregation
- 18:15Dynamic Integrity
- 18:59Current Status
- 21:48Roadmap
- 24:33Questions
related talks
41mSecuring Your Xen-Based Cloud
30mEnabling AMD SEV in Xen
40mDom0less and Deterministic: Building Safer Automotive Systems With Xen
28mProviding Confidential Guest Services with a Secure VM Service Module on AMD
22mVirtualization with Zephyr & Xen for Embedded Safety Systems
55mProtected Execution Facility On Power
11mTrusted in-guest hypervisor services with secure VM service module
42mProtected Execution Facility