EC2’s formally verified “isolation engine” provides mathematical assurance of virtual-machine isolation

Amazon Science Version 1 original current

Imported from official source

Splitting the “separation kernel” off from the rest of the Nitro security system and using only a subset of the Rust programming language to code it enabled its formal verification.

This version

Version
1 of 1
Recorded
September 20, 2026 19:52
Change
Initial
Content hash
302b690df8eb73c6afd657d0feebc572
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.