Upcoming x86 Technologies for Malicious Hypervisor Protection
summary
SEV-SNP provides memory integrity and stronger VM isolation on x86 by adding a global Reverse Map Table (RMP) and new instructions like RMP update and PVALIDATE to enforce ownership, prevent aliasing and detect remaps. It adds VM privilege levels (VMPL0–3), an attestation flow with ID blocks and versioned CPU/firmware keys, a migration agent for policy-checked moves, optional BTB prediction tracking and an SMT policy bit. Performance aims for low single-digit overhead; availability and deployment timelines are unspecified.
AI-written summary · about
chapters (9)
- 0:00Introduction to SNP
- 2:48Threat model and architecture
- 5:40Security goals and features
- 10:01Reverse map table and paging
- 16:27Virtual machine privilege
- 22:54Lifecycle and attestation
- 26:49Migration and side channels
- 28:40Future outlook and community
- 32:21Q&A session
related talks
25mProtecting from MaliciousHypervisor Using AMD SEV-SNP
34mSEV-SNP Development Status Update
30mEnabling AMD SEV in Xen
49mBreaking Hardware-Enforced Security With Hypervisors
15mRemote Attestation in AMD SEV-SNP Confidential VMs
41mUnifying Confidential Attestation
55mProtected Execution Facility On Power
33mAMD Encrypted Virtualization Update