United States Government Publishing Office publisher pbl distributor dst United States Commerce Department National Institute of Standards and Technology (NIST) author aut Government Organization Bartock, Michael. author aut text government publication eng GOVPUB Executive Agency Publications executive 2023-10-27 Commerce Department 2022-04-20 monographic deposited born digital 41 digital object pages C 13. https://www.govinfo.gov/app/details/GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6 P0b002ee1c1bb2b1f on1389890362 (OCoLC)1389890362 DGPO 2023-10-27 2026-06-27 GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6 machine generated eng fdlp C13 GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6 7b9a9b4db3f1d51661ed384e9e8390f6 GOVPUB NIST Interagency or Internal Reports NOTE: THE “DATE ISSUED” ABOVE MAY DEFAULT TO JANUARY 1ST OF A GIVEN YEAR. TO THE VIEW THE MOST ACCURATE DATE OF ISSUE, REVIEW THE TITLE PAGE OF THE PUBLICATION. Interim or final reports on work performed by NIST for outside sponsors (both government and non-government). May also report results of NIST projects of transitory or limited interest, including those that will be published subsequently in more comprehensive form. National Institute of Standards and Technology Commerce Department. National Institute of Standards and Technology. 2022 2022-04-20 https://www.govinfo.gov/app/details/GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6 https://www.govinfo.gov/content/pkg/GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6/pdf/GOVPUB-C13-7b9a9b4db3f1d51661ed384e9e8390f6.pdf Policy-Based Governance in Trusted Container Platforms Cloud computing Computer security Containers Hardware root of trust Hardware-enabled security Platform security Trusted compute pool Virtualization Bartock, Michael. creator Bartock, Michael. Souppaya, Murugiah. Xia, Haidong. Yeluri, Raghu. Shetty, Uttam. Lum, Brandon. Sabath, Mariusz. Singh, Harmeet. Youssef, Alaa. Steinder, Gosia. Cao, Yu. Ramanathan, Jayashree. National Institute of Standards and Technology (U.S.) Material Measurement Laboratory mdu U.S. Dept. of Commerce, National Institute of Standards and Technology 2022-04-20. monographic 1 online resource (41 pages) : illustrations (color) text technical report eng In today's cloud data centers and edge computing, attack surfaces have significantly increased, cyber attacks are industrialized, and most security control implementations are not coherent or consistent. The foundation of any data center or edge computing security strategy should be securing the platform on which data and workloads will be executed and accessed. The physical platform represents the foundation for any layered security approach and provides the initial protections to help ensure that higher-layer security controls can be trusted. This report explains an approach based on hardware-enabled security techniques and technologies for safeguarding container deployments in multi-tenant cloud environments. It also describes a prototype implementation of the approach intended to be a blueprint or template for the general security community. Michael Bartock; Murugiah Souppaya; Haidong Xia; Raghu Yeluri; Uttam Shetty; Brandon Lum; Mariusz Sabath; Harmeet Singh; Alaa Youssef; Gosia Steinder; Yu Cao; Jayashree Ramanathan. April 2022. Title from PDF title page (viewed January 4, 2023). Includes bibliographical references. Approved by the NIST Editorial Review Board on 2022-09-20 Mode of access: World Wide Web. Systems requirements: Adobe Acrobat PDF reader. Computer security Cloud computing Containers Hardware-enabled security Hardware root of trust Platform security Trusted compute pool Virtualization https://doi.org/10.6028/NIST.IR.8320B policy-based governance in trusted container platforms policy-based governance in trusted container platforms