While the security monitor is only in charge of VM s integrity and privacy protection, such as val­idating each mapping on Stage-2 page table, tracking the us­age of physical pages, and deploying the pointer of Stage-2 page tables.
instead, HA-VMSI still main­tain the flexibility of the hypervisor, but the security protec­tion is decoupled from the hypervisor into HA-VMSI.