Hypervisors offer substantial security through hardware-based isolation. For an additional layer of isolation within a hypervisor environment, Hyperlight — a lightweight virtual machine manager (VMM) designed to be embedded within applications — enables safe execution of untrusted code within micro VMs with very low latency and minimal overhead. For even further isolation and improved latency, WebAssembly (Wasm) binaries offer substantial security via software-fault isolation (SFI).
In this article, we look at what happens when you…