Scalable Attestation of Virtualized Execution Environments in Hybrid- and Multi-Cloud. (arXiv:2304.00382v1 [cs.CR])

Existing attestation mechanisms lack scalability and support for
heterogeneous virtual execution environments (VEEs), such as virtual machines
and containers executed inside or outside hardware isolation on different
vendors' hardware in clouds managed by various organizations. To overcome these
limitations, hardware vendors and cloud providers implement proprietary
mechanisms (Intel DCAP, Amazon NitroTPM, Google Titan) to support their
offerings. However, due to their plurality, the attestation becomes cumbersome
because it increases maintenance and integration costs and reduces portability
required in hybrid- and …

amazon attestation cloud clouds containers environments framework google hardware hybrid integration intel isolation machines managed multi-cloud organizations scalability support titan vendors virtual virtual machines