AMD SEV-SNP offers VM-level trusted execution environments (TEEs) to protect the
confidentiality and integrity for sensitive cloud workloads from untrusted hypervisor …

Hardware-based Trusted execution environments (TEEs) offer an isolation granularity of
virtual machine abstraction. They provide confidential VMs (CVMs) that host security …

Confidential VMs on platforms such as Intel TDX, AMD SEV and Arm CCA promise greater
security for cloud users against even a hypervisor-level attacker, but this promise has been …

Interrupts are critical hardware resources for OS kernels to schedule processes. As they are
related to system activities, interrupts can be used to mount various side-channel attacks (ie …

Microarchitectural side channels raise severe security concerns. Recent studies indicate that
microarchitecture security should be examined holistically (rather than separately) in …

The open and extensible RISC-V instruction set architecture marks a significant
advancement in the CPU industry by enabling new vendors to enter the CPU market. RISC …

Confidential virtual machines (VMs) promise higher security by running the VM inside a
trusted execution environment (TEE). Recent AMD server processors support confidential …

ABSTRACT Trusted Execution Environments are a promising solution for solving the data
privacy and trust issues introduced by cloud computing. As a result, all major CPU vendors …

Confidential Virtual Machines (CVMs) are a type of VMbased Trusted Execution
Environments (TEEs) designed to enhance the security of cloud-based VMs, safeguarding …

Using cloud-based applications comes with privacy implications, as the end-user looses
control over their data. While encrypting all data on the client is possible, it largely reduces …