Cloud Security
We’re working on building the most secure cloud infrastructure platforms. Our research focuses on ensuring the integrity of everything in the stack, reducing the attack surface of cloud systems, and advancing the use of confidential computing and hardware security modules.
Our work
Extending server integrity across space and time with Durable Attestation
Technical noteStrengthening cloud security with confidential computing
Technical noteWhat is confidential computing?
ExplainerOpen source workload identity management could help secure hybrid clouds
ReleaseIBM boosts software supply chain security with signature-based Kubernetes verification
ReleaseNew open source tool automates compliance
ReleaseAfter an unpredictable 2020, here’s what to expect for hybrid cloud in 2021
News
Tools + code
Virtual TPM
Libtpms-based Trusted Platform Module (TPM) emulator with socket, character device, and Linux CUSE interface.
View project →IMA: Integrity Management Architecture
A kernel integrity subsystem that detects if files have been accidentally or maliciously altered, both remotely and locally, appraises a file's measurement against a "good" value stored as an extended attribute, and enforces local file integrity.
View project →
Publications
- 2022
- Big Data 2022
- 2022
- ACSAC 2022
- 2022
- MICRO 2022
- 2022
- ESORICS 2022
- 2022
- KVM Forum 2022
- 2022
- LPC 2022