HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity

By Zhi Wang, Xuxian Jiang. IEEE Symposium on Security and Privacy, 2010

455 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Networks and Communications, Information Systems

View Paper: https://www.semanticscholar.org/paper/d1260cd1a2a7165b02f43d375071502a931f6b8e

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Networks and Communications

In Information Systems

Citations in the corpus

Control-Flow Integrity (2017, result): “Finally, we survey previous security evaluations and known attacks against CFI.”
Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM (2014, methodology): “Even the most recent CFI implementation, SAFEDISPATCH [19], must sacrifice software-engineering practicality and use profile-driven, whole-program optimization to achieve overheads comparable to ours (roughly 2% for all three of their Chromium benchmarks).”
Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection (2014, background): “CFI enforcement has also been shown for hypervisors [42], commodity operating system kernels [16] and mobile devices [18].”
CloudVisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization (2011, background): “Categories and Subject Descriptors D.4.6 [Operating Systems]: Security and Protection General Terms Design, Security, Performance Keywords Multi-tenant Cloud, Virtual Machine Security, Nested Virtualization”
Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization (2013, methodology): “Moreover, compiler-based follow-up works such as HyperSafe [61] or BGI [11] require a recompilation phase and the source code.”
An analysis of security issues for cloud computing (2013, methodology): “1 HyperSafe [60] It is an approach that provides hypervisor control-flow integrity.”
Practical Control Flow Integrity and Randomization for Binary Executables (2013, methodology): “HyperSafe [36] provides integrity for supervisor-mode code such as a hypervisor, including a CFIlike technique that replaces jump targets with integer indexes into function-specific tables.”
Out of Control: Overcoming Control-Flow Integrity (2014, background): “Since its inception in 2005, there have been tens of follow-up publications [15], [16], [17], [18], while it has been particularly successful on other domains like softwarefault isolation [19], [20].”
SoK: Eternal War in Memory (2013, background): “This the main reason why this solution works great with monolithic kernels [72] or hypervisors [73], where every module is statically linked together, but has not been deployed for dynamically linked applications.”