7 ways we harden our KVM hypervisor at Google Cloud security in plaintext By Andy Honig, Technical Lead Manager and Nelly Porter, Senior Product Manager Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine, and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the KVM project, benefiting the overall open-source community. What follows is a list of the main ways we security harden KVM, to help improve the safety and security of your applications. Proactive vulnerability search: There are multiple layers of security and isolation built into Google�s KVM (Kernel-based Virtual Machine), and we�re always working to strengthen them. Google�s cloud security staff includes some of the world�s foremost experts in the world of KVM security, and has uncovered multiple vulnerabilities i...
