A Comparative Study of Hardware-Based and Software-Based Secure Virtualization Technologies
摘要
The rapid growth of cloud computing, multi-tenant infrastructures, and distributed systems has driven the need for secure virtualization technologies. This paper analyzes hardware and software based secure virtualization techniques, focusing on Intel SGX, AMD SEV, ARM TrustZone, hypervisors, and container platforms like Docker and Kubernetes. We explore their architectures, security mechanisms, use cases, and trade-offs in performance, security, and application suitability. Our study highlights strengths, limitations, and research opportunities while emphasizing the importance of combining hardware and software security features. Additionally, we discuss emerging trends like confidential computing and zero-trust architectures to enhance data protection in modern infrastructures. This paper provides insights to help researchers and practitioners select and deploy secure virtualization technologies effectively.