Towards a Flexible, Lightweight Virtualization Alternative

Abstract

In recent times, two virtualization approaches have become dominant: hardware-level and operating system-level virtualization. They differ by where they draw the virtualization boundary between the virtualizing and the virtualized part of the system, resulting in vastly different properties. We argue that these two approaches are extremes in a continuum, and that boundaries in between the extremes may combine several good properties of both. We propose abstractions to make up one such new virtualization boundary, which combines hardware-level flexibility with OS-level resource sharing. We implement and evaluate a first prototype.

Isolating Real-Time Safety-Critical Embedded Systems via SGX-Based Lightweight Virtualization

“…In contrast to cloud computing, in CRTES development there is a need for specific mechanisms that guarantee and enforce the execution of applications to meet timing and safety requirements [3]. In years, several techniques were developed to abstract physical resources in virtual, from the classical full-virtualization and para-virtualization, to more recent OS-level virtualization [28], [29].…”