Files in this item

FilesDescriptionFormat

application/pdf

application/pdfWANG-THESIS-2015.pdf (1MB)Restricted to U of Illinois
(no description provided)PDF

Description

Title:Hypervisor introspection: a technique for evading passive virtual machine monitoring
Author(s):Wang, Gary L
Department / Program:Computer Science
Discipline:Computer Science
Degree Granting Institution:University of Illinois at Urbana-Champaign
Degree:M.S.
Genre:Thesis
Subject(s):security
virtual machine introspection (VMI)
side-channel
cloud
Abstract:Virtualization technology has enabled powerful security monitoring techniques, such as virtual machine introspection (VMI). These monitoring techniques, however, rely on the assumed isolation of virtualized environments from the hypervisor. We show that there are still some events that can be observed that break this isolation. External observers can discern when virtual machines are suspended due to hypervisor activity, and can use this information to mount advanced attacks that go undetected by VMI monitoring systems. We demonstrate some example attacks against realistic monitors using our technique, and discuss existing and potential defenses against these kinds of attacks.
Issue Date:2015-04-27
Type:Thesis
URI:http://hdl.handle.net/2142/78671
Rights Information:Copyright 2015 Gary Wang
Date Available in IDEALS:2015-07-22
Date Deposited:May 2015


This item appears in the following Collection(s)

Item Statistics