Secure in-VM monitoring using hardware virtualization

By Monirul I. Sharif, Wenke Lee, Weidong Cui, Andrea Lanzi. Conference on Computer and Communications Security, 2009

328 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Electrical and Electronic Engineering, Signal Processing

View Paper: https://www.semanticscholar.org/paper/a9439b3b34482c8b9f8c39063bf3383a6d8bced9

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Electrical and Electronic Engineering

In Signal Processing

Citations in the corpus

XTRec: Secure Real-Time Execution Trace Recording on Commodity Platforms (2011, methodology): “Recent approaches such as SIM [32] combine OS level logging with VMM based memory protections for efficient system call logging.”
Adversarial attacks against intrusion detection systems: Taxonomy, solutions and open issues (2013, background): “Another approach is to leave host sensors running on the monitored machine and protect them through hardware virtualization techniques (in-VM monitoring) [137].”
Hypervision Across Worlds: Real-time Kernel Protection from the ARM TrustZone Secure World (2014, background): “Hypervisor-based approaches, such as [12,20,23,24,30,31, 35,38,43–45,50,52], use virtualization to provide their security tools with high privilege and isolation.”
überSpark: Enforcing Verifiable Object Abstractions for Automated Compositional Security Analysis of a Hypervisor (2016, background): “Hypervisors not only enable the old-hat style of customization, such as modularity for device drivers, but are further extended with convenient functionality for security services such as attestation, debugging, tracing, application-level integrity and confidentiality, trustworthy resource accountin”
HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity (2010, background): “The unique security advantages from virtualization, especially in isolating and introspecting commodity OSes as virtual machines (VMs), have prompted a wave of research [18], [23], [28], [34], [36], [37], [40], [44], [53], [59].”
HyperSentry: enabling stealthy in-context measurement of hypervisor integrity (2010, background): “…{amazab, pning, zhi_wang, xuxian_jiang}@ncsu.edu Xiaolan Zhang IBM T.J. Watson Research Center cxzhang@us.ibm.com ABSTRACT This paper presents HyperSentry, a novel framework to enable integrity measurement of a running hypervisor (or any other highest privileged software layer on a system).”