📌 Poster presentation at APSys 2026
Toward Hardening VirtIO Drivers for Confidential VMs with a Rust-based DSL
Poster presentation at APSys 2026Lianjie Wang from the Shinagawa Laboratory presented a poster at the 17th ACM SIGOPS Asia-Pacific Workshop on Systems (APSys 2026), held in Bangkok, Thailand, in September 2026.
This research proposes a framework for hardening VirtIO drivers in Confidential Virtual Machines (CVMs) using Rust and a Domain-Specific Language (DSL).
Although CVMs protect their workloads from an untrusted host hypervisor, they still need to exchange data with the untrusted host through VirtIO for I/O. Malicious host inputs can therefore exploit vulnerabilities in VirtIO drivers, including buffer overflows and Time-of-Check-to-Time-of-Use (TOCTOU) attacks.
The proposed framework abstracts VirtIO operations into typed Rust interfaces and uses a DSL to describe packet layouts and constraints. It automatically validates inputs from the host, enabling VirtIO drivers to be implemented securely by construction.