Articoli correlati a Virtualization Technology Applied to Rootkit Defense

Virtualization Technology Applied to Rootkit Defense - Brossura

Medley, Douglas P.

 
9781288405619: Virtualization Technology Applied to Rootkit Defense

Sinossi

This research effort examines the idea of applying virtualization hardware to enhance operating system security against rootkits. Rootkits are sets of tools used to hide code and/or functionality from the user and operating system. Rootkits can accomplish this feat through using access to one part of an operating system to change another part that resides at the same privilege level. Hardware assisted virtualization (HAV) provides an opportunity to defeat this tactic through the introduction of a new operating mode. Created to aid operating system virtualization, HAV provides hardware support for managing and saving multiple states of the processor. This hardware support overcomes a problem in pure software virtualization, which is the need to modify guest software to run at a less privileged level. Using HAV, guest software can operate at the pre-HAV most privileged level. This thesis provides a plan to protect data structures targeted by rootkits through unconventional use of HAV technology to secure system resources such as memory. This method of protection will provide true real-time security through OS attack prevention, rather than reaction.

Le informazioni nella sezione "Riassunto" possono far riferimento a edizioni diverse di questo titolo.

Altre edizioni note dello stesso titolo

9781025133768: Virtualization Technology Applied to Rootkit Defense

Edizione in evidenza

ISBN 10:  1025133765 ISBN 13:  9781025133768
Casa editrice: Hutson Street Press, 2025
Rilegato