Inception is a system that improves the security of commodity virtualization systems in the face of attacks from rogue guest VMs. To address this threat, Inception disables all virtual devices not critical to running VMs in the cloud, and narrows the remaining ones by eliminating all their functionality not needed for the cloud.