Devlore: Device Interrupt Protection for Confidential VMs
The episode discusses the paper 'Devlore: Device Interrupt Protection for Confidential VMs,' which addresses a security flaw in confidential computing. The paper details how malicious hypervisors could fake or manipulate device interrupts, compromising secure virtual machines (CVMs). Devlore introduces a 'delegate-but-check' system that uses a trusted monitor to verify the authenticity of physical interrupts, providing security with minimal performance overhead.