Intravisor -- a hypervisor for fine-grained isolation using CHERI

" summary

Intravisor is a lightweight hypervisor for microservices that uses the CHERI hardware capability model to provide fine-grained isolation and efficient data sharing. It replaces heavyweight MMU-based transitions and page-granular sharing with CHERI capabilities, requires no software porting so is compatible with existing applications, and aims to offer strong security guarantees.

AI-written summary · about

" related talks

• 11mFast and fine-grained compartmentalisation in CHERIDapeng Gao, Robert N. M. Watson, Franz A. Fuchs, Peter Rugg, Jonathan Woodruff, Alexandre Joannou, Simon W. Moore · RISC-V Summit Europe 2025
• 10mCHERI in out-of-order microarchitecturesFranz Fuchs · RISC-V Summit Europe 2024
• 12mLibrary-based Compartmentalisation on CHERIDapeng Gao, Robert N. M. Watson · PLARCH 2023
• 30mLook Ma’, No (Real) Interrupt Controller!Marc Zyngier, Christoffer Dall · KVM Forum 2020
• 22mIntroduction to Project CHERIoTKunyan Liu · RISC-V Summit North America 2023
• 32mSeeing Through The Same Lens...Siqi Zhao, Wen Xu, Dawu Gu, Xuhua Ding · 26th USENIX Security Symposium (USENIX Security '17)
• 14mInside Out: A Paradigm Shift in VM IntrospectionThomas Pasquier, Dufy Teguia, Louis Duval, Teo Pisenti, Kahina Lazri, Daniel Hagimont, Renaud Lachaize, Alain Tchana · 20th USENIX Symposium on Operating Systems Design and Implementation (OSDI '26)
• 40mContainer Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, GoogleDawn Chen, Zhengyu He · KubeCon + CloudNativeCon Europe 2018