Confidential Computing & Micro-Segmentation to Protect Against Side-Channel Attacks

To address the Air ForceÆs need for a modern hypervisor that is both performant and highly resilient against sophisticated nation state Cyber Attacks. Mainsail has developed a TypeZero Hypervisor that is performant enough to run workloads such as RTOS and 5G and resilient enough to withstand sophisticated low stack attacks, prevent side channel attacks, and prevent lateral movement within the system. Metalvisor launches from firmware to create hardware-isolated domains that virtual machines (VMs) run in. All hardware is isolated and dedicated to VMs, including CPU cores and L3 cache isolation for micro-segmentation. A trusted compute base (200,000 lines of code) and data protection in all forms (in-use, at-rest, in-transit). Metalvisor is a foundational technology to enable next generation, secure edge computing for AI/ML, 5G/NextG, Cross-Domain Solution, Multi-Level Security, Joint All Domain Operations, C2-C6, etc. Mainsail is seeking a Phase 1 to research and identify all known side channel attacks and perform research on the best way to test our side channel protection with a DAF representative workload. We are focusing on Side Channel because if that problem is solved it allows our architects and engineers to design much more efficient, ōright-sizedö edge compute stacks.