NOVA: a microhypervisor-based secure virtualization architecture

By Udo Steinberg, B. Kauer. European Conference on Computer Systems, 2010

406 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Hypervision Across Worlds: Real-time Kernel Protection from the ARM TrustZone Secure World (2014, methodology): “Another method to do system protection without relying on the hypervisor is to use a thin privileged software layer, such as microhypervisors [36,40,53] or formally veriﬁed mi-crokernels [34].”
überSpark: Enforcing Verifiable Object Abstractions for Automated Compositional Security Analysis of a Hypervisor (2016, background): “NOVA [67] deprivileges everything (including VMM modules), except for a small privileged micro kernel.”
Building Verifiable Trusted Path on Commodity x86 Computers (2012, methodology): “We implement a simple user-oriented trusted path as a case study.”
My VM is Lighter (and Safer) than your Container (2017, background): “NOVA [44] is a microhypervisor consisting of a thin virtualization layer and thus aimed at reducing the attack surface (NOVA’s TCB is about 36K LoC, compared to for instance 11.4K for Xen’s ARM port).”
T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs (2017, background): “For example, Overshadow [7], NOVA [57], TrustVisor [43], Cloud Terminal [42], InkTag [21], MiniBox [37], and Sego [33] are TEEs based on trusted hypervisors.”