PS-UIE: Privilege-Separated Integrity Enforcement for User-Space Executable Objects in Confidential VMs

Jingkai Mao, Xiaolin Chang

Confidential Virtual Machines (CVMs), such as AMD SEV-SNP, enable cloud tenants to run security-sensitive workloads, but tenants can rely on the execution of these workloads only w…