# Virtualization Airborne Trusted General Computing Technology
## 1 Introduction
In reference [20], the authors compare dozens of major virtualization solutions for mixed-criticality systems from four categories: separation kernel and microkernel, general purpose, ARM TrustZone assisted, and lightweight virtualization. In the cloud and edge computing environments, the main threats include network traffic attacks, malware attacks, virtual network attacks, and DOS and DDOS attacks. Virtual machines mainly adopt virtual machine intrusion, hypervisor intrusion, and hybrid and other protection methods [21]. In [22], the authors present a detailed survey of the topics and challenges pertaining to security in hardware-assisted virtualization. They research risk modeling and threat evaluation and discuss the possible countermeasures and open challenges that remain in virtualization technologies. In [23], the authors analyze the different vulnerabilities that may affect the components of different virtualization models and identify related attacks. They propose several counter-measures and recommendations for hypervisor and virtual machine design. Reference [24] presents an approach for the experimental assessment of isolation properties against timing covert channels in the context of VxWorks MILS. In addition, the article presents an experimental evaluation, to show that timing covert channels are indeed feasible. Reference [25] proposes the S2H scheme, implements an efficient shared memory access, and proposes a \"batch-grained\" scheduling strategy, to ensure network performance in multi-tenant scenarios. However, the S2H scheme requires a lot of computing resources. Reference [26] proposed a zero-trust distributed engine control (ZT-DEC) strategy and architecture, which can mitigate against the risks of cyber-attacks and intrusions in safety critical systems. However, the ZTDEC architecture has limited performance and application scenarios. Reference [27] defined a safety and security co-engineering methodology for a systematic safety-security analysis of mixed-criticality systems running on heterogeneous high-performance embedded computing devices. However, the implementation of this methodology is complex and depends on the software stack. In [28], the authors used a concrete implementation to evaluate a multicore mixed-criticality system solution and compared it to a standard time-and-space-partitioning solution. Hence, in response to the demand of new-generation information-based civil aircraft for airborne general computing services, a new platform with lower energy conservation, higher performance, and more secure protection is required. The major contributions of this paper are listed as follows:  
1. Establishing a virtualization airborne trusted general computing service architecture based on virtualization and trusted computing technologies. 2. Designing key components, including embedded trusted multi-core computing hardware, embedded virtualization management software, virtualized trusted computing middleware, and embedded virtualized security access components. The paper is structured as follows. Section 2 proposes the architecture of a virtualization airborne trusted general computing service platform. Section 3 describes the implementation methods for the key technologies. Section 4 presents the experimental results and a comparison to the AGCSP. Section 5 concludes the paper.