2026-09-19T16:31:45Z https://www.ideals.illinois.edu/oai-pmh

oai:www.ideals.illinois.edu:2142/78671 2023-07-11 col_2142_5131 col_2142_10761 com_2142_5130 com_2142_10755 com_2142_234

2015-04-27 2015-5 Wang, Gary L 2015-07-22T22:33:55Z 2015-07-22T22:33:55Z 2017-07-23T09:15:19Z 2015-05 Virtualization technology has enabled powerful security monitoring techniques, such as virtual machine introspection (VMI). These monitoring techniques, however, rely on the assumed isolation of virtualized environments from the hypervisor. We show that there are still some events that can be observed that break this isolation. External observers can discern when virtual machines are suspended due to hypervisor activity, and can use this information to mount advanced attacks that go undetected by VMI monitoring systems. We demonstrate some example attacks against realistic monitors using our technique, and discuss existing and potential defenses against these kinds of attacks. Submission published under a 24 month embargo labeled 'U of I only', the embargo will last until 2017-05-01 The student, Gary Wang, accepted the attached license on 2015-04-24 at 14:37. The student, Gary Wang, submitted this Thesis for approval on 2015-04-24 at 14:48. This Thesis was approved for publication on 2015-04-27 at 17:02. DSpace SAF Submission Ingestion Package generated from Vireo submission #8096 on 2015-07-22 at 14:18:52 Made available in DSpace on 2015-07-22T22:33:55Z (GMT). No. of bitstreams: 2 WANG-THESIS-2015.pdf: 1084800 bytes, checksum: ef73b7149b1241268e3eca20b5ea70b1 (MD5) LICENSE.txt: 4206 bytes, checksum: aa16f144037dc9dafdda360d1f08fa11 (MD5) Previous issue date: 2015-04-27 Embargo set by: Seth Robbins for item 79912 Lift date: 2017-07-22T22:34:16Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system U of I Only Restriction Lifted for Item 79912 on 2017-07-23T09:15:19Z. application/pdf http://hdl.handle.net/2142/78671 en Copyright 2015 Gary Wang security virtual machine introspection (VMI) side-channel cloud Hypervisor introspection: a technique for evading passive virtual machine monitoring text text Computer Science Computer Science University of Illinois at Urbana-Champaign Thesis M.S.