HClave: An isolated execution environment design for hypervisor runtime security

Qihang Zhou, Wenzhuo Cao, Xiaoqi Jia, Shengzhi Zhang, Jiayun Chen, Nan Jiang, Weijuan Zhang, Haichao Du, Zhenyu Song, Qingjia Huang

Abstract: Highlights•HClave is a novel Isolated Execution Environment methodology for hypervisors.•HClave limits the impact of each VM on the virtualization layer to a per-VM HClave.•HClave minimizes the TCB of the virtualization layer without affecting functionality.•HClave has been deployed on both X86 and ARM64 platforms.