About
WorldGuard is a Trusted Execution Environment (TEE) security model that allows hardware-level software isolation. It protects software from improper memory and device accesses that can be initiated by any other piece of software present in the system. This is made via the concept of secure domains, also called "worlds", that isolates code execution and data accesses.
Adding WorldGuard support for QEMU accomplishes two things. It'll enable virtual machine software to be isolated using exclusive secure domains. It'll also enable engineers to write secure systems using the QEMU emulation as an alternative of real hardware that might lack WorldGuard support.
WorldGuard Spec v0.4:
- https://lists.riscv.org/g/security/message/710
- PDF: https://lists.riscv.org/g/security/attachment/711/0/worldguard_rvia_spec-v0.4.pdf
Project Scope and Timelines
Components and Repos
Stakeholders and Partners
Dependencies
None
Measure of Success
An accepted and tested design and implementation by end of 4Q2023.