📌 Poster presentation at APSys 2026

Toward Hardening VirtIO Drivers for Confidential VMs with a Rust-based DSL

Poster presentation at APSys 2026

Lianjie Wang from the Shinagawa Laboratory presented a poster at the 17th ACM SIGOPS Asia-Pacific Workshop on Systems (APSys 2026), held in Bangkok, Thailand, in September 2026.

This research proposes a framework for hardening VirtIO drivers in Confidential Virtual Machines (CVMs) using Rust and a Domain-Specific Language (DSL).

Although CVMs protect their workloads from an untrusted host hypervisor, they still need to exchange data with the untrusted host through VirtIO for I/O. Malicious host inputs can therefore exploit vulnerabilities in VirtIO drivers, including buffer overflows and Time-of-Check-to-Time-of-Use (TOCTOU) attacks.

The proposed framework abstracts VirtIO operations into typed Rust interfaces and uses a DSL to describe packet layouts and constraints. It automatically validates inputs from the host, enabling VirtIO drivers to be implemented securely by construction.

Shinagawa Laboratory
Administartor

Shinagawa Laboratory, The University of Tokyo