VIMM: Runtime Integrity Measurement of a Virtualized Operating System

This paper discusses the design of the virtualization integrity measurement monitor (vimm) framework, which aims to provide runtime integrity measurement of a virtualized guest os. kernel memory and additional hardware state changes are constantly monitored and aggregated into a combined guest os state, which is reported to a trusted platform module (tpm), thus providing a trusted integrity measurement in runtime. this measurement can then be used for data protection (sealing of secret keys) and remote attestation based on the runtime integrity of the guest os.