Analysis of the Intel Pentium's Ability to Support a Secure Virtual Machine Monitor

By J. Robin, Cynthia E. Irvine. USENIX Security Symposium, 2000

394 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Hardware and Architecture

View Paper: https://www.semanticscholar.org/paper/b3c3d245f6ccb829cf158de84241664849cc58ab

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Hardware and Architecture

Citations in the corpus

Hop-count filtering: an effective defense against spoofed DDoS traffic (2003, neutral): “Off-line IP traceback [4, 36, 37, 38, 41] attempts to establi sh procedures to track down flooding sources after occurrences of DDoS attacks.”
Implementing Pushback: Router-Based Defense Against DDoS Attacks (2002, neutral): “Others , such as [18] require all edge routers to log (a sample of all) packets, and then analyze the logs in order to identify, and hopefully block, sources of the attack.”
Denali: Lightweight Virtual Machines for Distributed and Networked Applications (2001, neutral): “An example of architectural complexity is the presence of non-virtualizable instructions in the x86 instruction set [37].”
SIFF: a stateless Internet flow filter to mitigate DDoS flooding attacks (2004, neutral): “Stone proposes the CenterTrack mechanism, which uses routers capable of input debugging (the ability to determine through which router interface a particular packet was received) that would be virtually connected through IP tunnels to all border routers on a network [42].”
Practical network support for IP traceback (2000, neutral): “While such tracing is freq uently performed manually, several ISPs have developed tools to au tomatically trace attacks across their own networks [41].”
PolyUnpack: Automating the Hidden-Code Extraction of Unpack-Executing Malware (2006, neutral): “For example, virtualization problems with some instructions in the x86 architecture [14] provide simple ways for a program to detect that is running inside a VM.”
The Internet Motion Sensor - A Distributed Blackhole Monitoring System (2005, positive): “packets, CenterTrack [29] leveraged the existing routing infrastructure to collect denial of service traffic for analysis.”
Secure and Flexible Monitoring of Virtual Machines (2007, neutral): “This approach has the advantage of providing good performance, since no trapping is done, and also allowing virtual machines to run on top of non-virtualizable architectures (such as x86) [25].”
Towards an understanding of anti-virtualization and anti-debugging behavior in modern malware (2008, neutral): “For example, legacy CPU instruction sets may contain instructions that simply cannot be virtualized [28], and the discrepancies revealed by physical resources are inherently difficult to eliminate [13] [27] [28] [19] due to the side effect of virtualization.”
On the effectiveness of probabilistic packet marking for IP traceback under denial of service attack (2001, positive): “Packet marking can be viewed as a form of “stateless logging” which emulates the capability of path recovery by router based information logging [12], [14], without incurring the latter’s statefulness and associated space overhead.”