We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback

Isolating PCI/CXL Devices: It All Starts with System Launch

00:00

Formal Metadata

Title
Isolating PCI/CXL Devices: It All Starts with System Launch
Title of Series
Number of Parts
287
Author
License
CC Attribution 2.0 Belgium:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
It has been well established that the integrity of critical systems must be rooted in the launch. Early works such as the Xoar architecture demonstrated the need for virtualized environments to begin with a lightweight, restricted bootstrap from which isolation of PCI management could be established. Since that time, knowledge of real IOMMU implementations and how to leverage them for system integrity has evolved. In this presentation, the new Hyperlaunch capability for starting hypervisors will be presented with a short discussion of the Xen implementation. The talk will progress to a discussion of how Hyperlaunch is connected with TrenchBoot (Linux Secure Launch) and Mandatory Access Control communication fabrics. With a focus on how it enables dedicated PCI management constructs that can provide secure and trustworthy isolation for PCI devices, with the potential for CXL devices. The talk will close with an open discussion on how hypervisors might unify around a common approach for IOMMU management.
Discrete element methodPhysical systemOpen setInternet service providerSoftwareRevision controlControl flowGUI widgetSign (mathematics)Read-only memoryProcess capability indexProcess (computing)Variety (linguistics)Fundamental theorem of algebraGame controllerInformation securityFlow separationPoint (geometry)Integrated development environmentDomain nameDevice driverModel theoryWeb pageTime domainTable (information)VirtualizationTime evolutionComputer hardwareLogicBroadcast programmingLimit (category theory)MassMemory managementBefehlsprozessorVirtual realityFunction (mathematics)Level (video gaming)ImplementationTranslation (relic)TDMAScalabilityAsynchronous Transfer ModeIntelProper mapHeat transferAsynchronous Transfer ModePhysical systemTerm (mathematics)OntologyLevel (video gaming)HorizonConnectivity (graph theory)Device driverComputer clusterPeripheralDomain nameImplementationDeterminantInformation securityProjective planeDigital photographyComputer hardwareStandard deviationGroup actionBit rateArithmetic meanOrder (biology)Degree (graph theory)Natural numberDifferent (Kate Ryan album)Natural languageContent (media)ScalabilityHypercubeDigital mediaConfidence intervalEndliche ModelltheorieWeb pageBus (computing)EvoluteMetropolitan area networkVirtualizationSeitentabelleVideo gameElectronic mailing listResultantView (database)Game controllerOpen setSoftwareSoftware developerOcean currentPoint (geometry)Revision controlFunctional (mathematics)Process (computing)Software frameworkProcess capability indexMikrokernelHeegaard splittingCovering spacePosition operatorSemiconductor memoryExclusive orMultiplication signVariety (linguistics)DiagramComputer animation
Computer hardwareTime domainKernel (computing)MultiplicationPhysical systemEnterprise architectureIntegrated development environmentProcess capability indexSign (mathematics)Memory managementControl flowRun time (program lifecycle phase)Drum memoryDataflowInformationImplementationZugriffskontrolleDevice driverPartition (number theory)Communications protocolVirtual realityMessage passingRead-only memorySource codeTelecommunicationGame controllerBuildingSystem programming3 (number)VirtualizationCore dumpSimilarity (geometry)Information securityFirmwareInterface (computing)Data managementFront and back endsLevel (video gaming)Internet service providerGroup actionComputer hardwareConstructor (object-oriented programming)Physical systemCombinational logicRun time (program lifecycle phase)Integrated development environmentHypercubeRight angleTemporal logicVulnerability (computing)Message passingLimit (category theory)MereologyMultiplication signState of matterAuthorizationShared memoryDataflowGoodness of fitCASE <Informatik>Open sourceVariety (linguistics)Device driverInformation securityVirtualizationArithmetic meanDigital mediaProcess (computing)Game controllerImplementationComputer architectureTelecommunicationData managementLine (geometry)Internet service providerLevel (video gaming)Moment (mathematics)Uniqueness quantificationConnectivity (graph theory)Heat transferCommunications protocolEnterprise architectureCategory of beingInformationMusical ensemblePresentation of a groupNatural numberINTEGRALProcess capability indexFront and back endsSoftware frameworkCore dumpInterface (computing)Kernel (computing)Phase transitionNumberExclusive orDomain nameMultiplicationBuildingBasis <Mathematik>Computer animation
Memory managementInformation securityTemporal logicDifferent (Kate Ryan album)Process capability indexEnterprise architectureStandard deviationInterface (computing)Operations researchTable (information)Information overloadTerm (mathematics)Read-only memoryControl flowDirected setData structureMoment (mathematics)AnalogyPerspective (visual)Multiplication signPresentation of a groupMappingFront and back endsMechanism designPeripheralRepresentation (politics)Variety (linguistics)Acoustic shadowDifferent (Kate Ryan album)Information securityAuthorizationBuffer solutionInformationIndependence (probability theory)Context awarenessPlanningGroup actionElectronic mailing listGame controllerProcess capability indexOperator (mathematics)Set (mathematics)Standard deviationComputer architectureSemiconductor memoryCategory of beingKeyboard shortcutVirtualizationObject (grammar)CASE <Informatik>Maxima and minimaAnalogyPCI ExpressDevice driverVulnerability (computing)MultiplicationInterface (computing)Domain nameDataflowMoment (mathematics)Data structureVideoconferencingFunctional (mathematics)Right angleKey (cryptography)Direction (geometry)Workstation <Musikinstrument>View (database)Computer animation
Bit rateInformationBootingComputer animationMeeting/Interview
Computer animation
Transcript: English(auto-generated)