Abstract:The OS kernel is critical to the security of a computer system. Many systems have been proposed to improve its security. A fundamental weakness of those systems is that page tables, the data structures that control the memory protection, are not isolated from the vulnerable kernel, and thus subject to tampering. To address that, researchers have relied on virtualization for reliable kernel memory protection. Unfortunately, such memory protection requires to monitor every update to the guest's page tables. This fundamentally conflicts with the recent advances in the hardware virtualization support. In this paper, we propose SecPod, an extensible framework for virtualization-based security systems that can provide both strong isolation and the compatibility with modern hardware. SecPod has two key techniques: paging delegation delegates and audits the kernel's paging operations to a secure space; execution trapping intercepts the (compromised) kernel's attempts to subvert SecPod by misusing privileged instructions. We have implemented a prototype of SecPod based on KVM. Our experiments show that SecPod is both effective and efficient.

Research on Sensitive Data Protection of Windows Application Program

Research on Information Security Model and Security System Design

Design and Implementation of SecPod, A Framework for Virtualization-Based Security Systems.

The Research of Information Hiding Technology Based on Portable Executable File Format

Method for Sensitive Data Protection of Web Servers in the Cloud

The Application of Virtual Machines on System Security

SeVMM: VMM-Based Security Control Model

Research on Information Protection Model Based on Process Isolation

Research on Key Memory Attack Windows 7 Operating System

Analysis and research of computer information security technology under big data background

Research on Security Techniques Based on System Virtualization

Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel

Windows Security:The gradual improvement of SEH mechanism

On the effectiveness of virtualization-based security

RESEARCH ON CONTROLLING THE ACCESS AND CAPABILITY OF APPLICATIONS ON WINDOWS PLATFORM

Anti-key Logger Based on Hardware-assisted Virtualization

RESEARCH AND IMPLEMENTATION OF SECURITY KERNEL SYSTEM FOR SERVER SYSTEM

Windows 7 SP1 for DKOM Under the Attack Technology Research

Research on Internet data security and privacy protection

Application of Data Encryption Technology in Computer Network Security

Preventing Secret Data Leakage from Foreign Mappings in Virtual Machines