ALASCA Tech-Talk #11

Die ALASCA Tech-Talks bieten eine Plattform, um Projekte zu diskutieren, die das Potenzial haben, die digitale Souveränität digitaler Infrastrukturen und von Cloud-Diensten zu verbessern, sowie für Anwendungsfälle, die auf diese digital-souveränen Infrastrukturen und Dienste angewiesen sind.

„Building a modern, secure, open hypervisor for the Cloud“

Markus Partheymüller (Co-Founder & Director of Engineering bei Cyberus Technology)

Virtualization Technology is one of the key ingredients in Cloud Computing Architectures. KVM and Qemu are the two open-source software projects that constitute the Hypervisor in OpenStack clouds.

While both offer an incredible amount of features and are battle-tested in all kinds of scenarios, they come with challenges regarding complexity and security. In this talk we will introduce techniques we are developing for the Cyberus Hypervisor to harden and protect cloud compute hosts against advanced nation-state attackers.

Our experience, working with secunet and BSI on a secure endpoint product, taught us about the trade-offs involved in building a secure virtualization system from scratch. We are now looking to apply what we have learned so we can build a secure system on open-source technology, for the cloud.