Delusional boot
Anh Hoai Duc Nguyen, Himanshu Raj, Shravan Rayanchu, Stefan Saroiu, Alec Wolman · 2012
The set of virtual devices offered by a hypervisor to its guest VMs is a virtualization component ripe with security exploits -- more than half of all vulnerabilities of today's hypervisors are found in this codebase. This paper presents Min-V, a hypervisor that disables all virtual devices not critical to running VMs in the cloud. Of the remaining devices, Min-V takes a step further and eliminates all remaining functionality not needed for the cloud.