All the Things You Can Do with ARMv8 Virtualization

Explore the capabilities of ARMv8 virtualization in this 38-minute conference talk presented by Janne Karhunen and Jani Hyvönen from Digital 14 at a Linux Foundation Security Summit. Delve into ARMv8 basics, focusing on 2-stage translation, and learn how to create a secure hideout, lift the host kernel, implement kernel protection, and slice up KVM. Gain insights into the overall system architecture, understand how it functions, and examine the VIRTIO case. Discover useful memory protection techniques to enhance your virtualization knowledge and skills.

SECURITY SUMMIT
The Problem statement
The goal
ARMv8 basics – 2 stage translation
Stage zero - Create a hideout
Stage one - lift the host kernel
Stage one – the kernel protection
Stage two-slice up the KVM
The big picture
How the system works
Case VIRTIO
Useful memory protections