There's a good talk on securing bare metal cloud servers against such attacks, that was given at B-Sides in Portland, by two respected security people who worke

There's a good talk on securing bare metal cloud servers against such attacks, that was given at B-Sides in Portland, by two respected security people who worked on securing bare metal cloud infrastructure for one cloud provider: https://www.youtube.com/watch?v=PEVVRkd-wPM https://www.youtube.com/watch?v=PEVVRkd-wPM Boiled down it comes to: Trust absolutely nothing. When a customer finishes with a server, wipe absolutely everything, re-flash every single bit of firmware on every single device in the machine, and don't use the standard flashing mechanisms to do so. It's worth a listen/watch.