Remote detection of virtual machine monitors with fuzzy benchmarking

Operating Systems Review (ACM)

Volumn 42, Issue 3, 2008, Pages 83-92

  Franklin, Jason ^a   Luk, Mark ^a   McCune, Jonathan M ^a   Seshadri, Arvind ^a   Perrig, Adrian ^a   Van Doorn, Leendert ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b ADVANCED MICRO DEVICES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODE SEQUENCES; EXECUTION TIME; HARDWARE CONFIGURATIONS; REMOTE DETECTION; REMOTE MACHINES; REMOTE SYSTEMS; TIMING MEASUREMENT; VIRTUAL MACHINE MONITORS;

BENCHMARKING;

EID: 74049116761     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1368506.1368518     Document Type: Conference Paper

References (22)

1. K. Adams and O. Agesen. A comparison of software and hardware techniques for x86 virtualization. In Proceedings of ASPLOS, October 2006.
2. D. Boggs, A. Baktha, J. Hawkins, D.T. Marr, J. A. Miller, P. Roussel, Singhal R, B. Toll, and K. S. Venkatraman. The microarchitecture of the Intel Pentium 4 processor on 90nm technology. Intel Technology Journal, 8(1), February 2004.
3. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In Proceedings of the USENIX Security Symposium, August 2004.
4. G. Delalleau. Mesure locale des temps d'execution: application au controle d'integrite et au fingerprinting. In Proceedings of SSTIC, 2004.
5. Advanced Micro Devices. AMD64 virtualization: Secure virtual machine architecture reference manual. AMD Publication no.33047 rev. 3.01, May 2005.
6. M. Dornseif, T. Holz, and C. Klein. Nosebreak - attacking honeynets. In Proceedings of the 2004 IEEE Information Assurance Workshop, June 2004.
7. T. Garfinkel, B. Pfaff, J. Chow, and M. Rosenblum. Data lifetime is a systems problem. In Proceedings of the ACM SIGOPS European Workshop, September 2004.
8. T. Holz and F. Raynal. Detecting honeypots and other suspicious environments. In Proceedings of the IEEE Workshop on Information Assurance and Security, June 2005.
9. Intel Corporation. Intel virtualization technology. Available at: http://www.intel.com/technology/computing/vptech/, October 2005.
10. X. Jiang, D. Xu, Helen J. Wang, and E. H. Spafford. Virtual playgrounds for worm behavior investigation. In Proceedings of RAID, 2005.
11. S. T. King, P. M. Chen, Y.-M. Wang, C. Verbowski, H. J. Wang, and J. R. Lorch. SubVirt: Implementing malware with virtual machines. In Proceedings of the IEEE Symposium on Security and Privacy, May 2006.
12. T. Kohno, A. Broido, and K. Claffy. Remote physical device fingerprinting. In IEEE Symposium on Security and Privacy, May 2005.
13. Gerald J. Popek and Robert P. Goldberg. Formal requirements for virtualizable third generation architectures. Communications of the ACM, 17, July 1974.
14. J. S. Robin and C. E. Irvine. Analysis of the intel pentium's ability to support a secure virtual machine monitor. In Proceedings of the USENIX Security Symposium, 2000.
15. E. Rotenberg, S. Bennett, and J. E. Smith. Trace cache: A low latency approach to high bandwidth instruction fetching. In Proceedings of the 29th Annual International Symposium on Microarchitecture, November 1996.
16. J. Rutkowska. Subverting Vista kernel for fun and profit. Presented at Black Hat USA, 2006.
17. J. Rutkowski. Execution path analysis: finding kernel rootkits. Phrack, 11(59), July 2002.
18. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. Van Doorn, and P. Khosla. Pioneer: Verifying integrity and guaranteeing execution of code on legacy platforms. In Proceedings of SOSP, 2005.
19. S. Staniford, V. Paxson, and N. Weaver. How to 0wn the internet in your spare time. In Proceedings of the 11th USENIX Security Symposium (Security '02), 2002.
20. VMWare. Timekeeping in VMWare virtual machines. Technical Report NP-ENG-Q305-127, VMWare, Inc., July 2005.
21. M. Vrable, J. Ma, J. Chen, D. Moore, E. Vandekieft, A. C. Snoeren, G. M. Voelker, and S. Savage. Scalability, fidelity and containment in the potemkin virtual honeyfarm. In Proceedings of SOSP, 2005.
22. D. D. Zovi. Hardware virtualization-based rootkits. Presented at Black Hat USA, August 2006.