WELES: Policy-driven Runtime Integrity Enforcement of Virtual Machines

Understand

Trust is of paramount concern for tenants to deploy their security-sensitive services in the cloud.

• The integrity of VMs in which these services are deployed needs to be ensured even in the presence of powerful adversaries with administrative access to the cloud.
• Traditional approaches for solving this challenge leverage trusted computing techniques, e.g., vTPM, or hardware CPU extensions, e.g., AMD SEV.
• But, they are vulnerable to powerful adversaries, or they provide only load time (not runtime) integrity measurements of VMs.