Difference between revisions of "Xen and Intel Hardware-Assisted Virtualization Security"

From Xen
(initial version)
 
(Intel Trusted Execution Technology (TXT) - DRTM)
Line 9: Line 9:
 
== Intel Trusted Execution Technology (TXT) - DRTM ==
 
== Intel Trusted Execution Technology (TXT) - DRTM ==
  
  - [https://web.archive.org/web/20140611161423/http://www-archive.xenproject.org/files/xensummit_fall07/23_JosephCihula.pdf Verifying the Xen launch] (2007)
+
  - Intel [https://web.archive.org/web/20140611161423/http://www-archive.xenproject.org/files/xensummit_fall07/23_JosephCihula.pdf Verifying the Xen launch] (2007)
  - [http://theinvisiblethings.blogspot.com/2011/09/anti-evil-maid.html Anti Evil Maid] (2011)
+
  - Qubes [http://theinvisiblethings.blogspot.com/2011/09/anti-evil-maid.html Anti Evil Maid] (2011)
 
  - [https://digital.library.unt.edu/ark:/67531/metadc804971/ Secure policy engine in hypervisor] (2015)
 
  - [https://digital.library.unt.edu/ark:/67531/metadc804971/ Secure policy engine in hypervisor] (2015)
 
  - [https://www.linux.com/blog/event/elce/2017/10/device-we-trust-measure-twice-compute-once-xen-linux-tpm-20-and-txt TXT measured launch with TPM 2.0 and OTA update] (2017)
 
  - [https://www.linux.com/blog/event/elce/2017/10/device-we-trust-measure-twice-compute-once-xen-linux-tpm-20-and-txt TXT measured launch with TPM 2.0 and OTA update] (2017)

Revision as of 01:05, 15 May 2018


Intel Software Guard Extensions (SGX) - Secure Enclave

- Preliminary patches
- ITL thoughts on SGX: part1 · part2 (2013)
- Intel slides · video (2017)

Intel Trusted Execution Technology (TXT) - DRTM

- Intel Verifying the Xen launch (2007)
- Qubes Anti Evil Maid (2011)
- Secure policy engine in hypervisor (2015)
- TXT measured launch with TPM 2.0 and OTA update (2017)