Overshadow: A Virtualization-Based Approach to Retrofitting Protection in Commodity Operating Systems

摘要

Commodity operating systems entrusted with securing sensitive data are remarkably large and complex, and consequently, frequently prone to compromise. To address this limitation, we introduce a virtual-machine-based system called Overshadow that protects