Virtual machine introspection for Intel TDX

Develop a virtual machine introspection solution for Intel TDX by determining how RealmEye’s in-module introspection principles can be adapted to the TDX module’s extension mechanism, SEAMCALL semantics, and attestation protocol.

Background

Intel TDX is identified as another mainstream confidential-VM platform in which the untrusted Hypervisor is excluded from the VM’s trusted computing base. Unlike AMD SEV-SNP, which has the 00SEVen system, the paper describes Intel TDX as lacking an equivalent public VMI solution.

RealmEye’s main ideas—executing introspection inside a trusted intermediary, encrypting returned results, and resolving symbols autonomously—are said to apply conceptually to TDX. Nevertheless, TDX uses different mechanisms, including the TDX module, SEAMCALL interface, and attestation protocol, so realizing VMI on that platform remains unresolved.