A Hardware-Software Co-Design for Efficient Secure Containers
VM-level containers provide strong isolation by running each container with its own kernel in a VM. However, they rely on virtualization hardware designed for general-purpose VMs, causing non-negligible performance overhead compared to OS-level containers. This performance gap widens dramatically in nested virtualization scenarios, where secure containers run inside a VM.
Authors
- Yubin Xia (ORCID: https://orcid.org/0000-0001-6558-5298)
- Jiacheng Shi (ORCID: https://orcid.org/0000-0002-2725-8955)
- Jinyu Gu (ORCID: https://orcid.org/0000-0002-8112-8481)
- Yu Yang (ORCID: https://orcid.org/0009-0003-5904-5115)
Institutions
- Shanghai Jiao Tong University (CN)
Publication Details
- Published
- 2025-03-26
- DOI
- https://doi.org/10.1145/3689031.3717473
- Primary Topic
- Security and Verification in Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.00