Building Reliable and Secure Virtual Machines Using Architectural Invariants

HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.