Articles liés à Virtualization Technology Applied to Rootkit Defense

Virtualization Technology Applied to Rootkit Defense - Couverture souple

Medley, Douglas P

 
9781288405619: Virtualization Technology Applied to Rootkit Defense

Synopsis

This research effort examines the idea of applying virtualization hardware to enhance operating system security against rootkits. Rootkits are sets of tools used to hide code and/or functionality from the user and operating system. Rootkits can accomplish this feat through using access to one part of an operating system to change another part that resides at the same privilege level. Hardware assisted virtualization (HAV) provides an opportunity to defeat this tactic through the introduction of a new operating mode. Created to aid operating system virtualization, HAV provides hardware support for managing and saving multiple states of the processor. This hardware support overcomes a problem in pure software virtualization, which is the need to modify guest software to run at a less privileged level. Using HAV, guest software can operate at the pre-HAV most privileged level. This thesis provides a plan to protect data structures targeted by rootkits through unconventional use of HAV technology to secure system resources such as memory. This method of protection will provide true real-time security through OS attack prevention, rather than reaction.

Les informations fournies dans la section « Synopsis » peuvent faire référence à une autre édition de ce titre.

Autres éditions populaires du même titre

9781025133768: Virtualization Technology Applied to Rootkit Defense

Edition présentée

ISBN 10 :  1025133765 ISBN 13 :  9781025133768
Editeur : Hutson Street Press, 2025
Couverture rigide