SecVisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity OSes

No abstract is available for this paper.

• Publication year

  2007

• Venue

  Symposium on Operating Systems Principles

• Publication date

  2007-10-14

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1145/1294261.1294294
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Secure virtual architecture: a safe execution environment for commodity operating systems

  2007cited by this paper
• The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)

  2007cited by this paper
• Non-Control-Data Attacks Are Realistic Threats

  2005cited by this paper
• Pioneer: verifying code integrity and enforcing untampered code execution on legacy systems

  2005cited by this paper
• A generic attack on checksumming-based software tamper resistance

  2005cited by this paper
• AskStrider: What Has Changed on My Machine Lately?

  2004cited by this paper
• Why It's A Bad Idea For Stealth Software To Hide Files

  2004cited by this paper
• Copilot - a Coprocessor-based Kernel Runtime Integrity Monitor

  2004cited by this paper
• Ups and Downs of UNIX/Linux Host-Based Security Solutions

  2003cited by this paper
• Terra: a virtual machine-based platform for trusted computing

  2003cited by this paper
• A Virtual Machine Introspection Based Architecture for Intrusion Detection

  2003cited by this paper
• Secure Execution via Program Shepherding

  2002cited by this paper
• US Secure Hash Algorithm 1 (SHA1)

  2001cited by this paper
• Building the IBM 4758 Secure Coprocessor

  2001cited by this paper
• Loadable Kernel Modules

  2001cited by this paper
• The Linux BIOS

  2000cited by this paper
• Building a high-performance, programmable secure coprocessor

  1999cited by this paper
• First Draft of a Report on the EDVAC

  1998cited by this paper
• lmbench: Portable Tools for Performance Analysis

  1996cited by this paper
• First draft of a report on the EDVAC

  1993cited by this paper

• Tide: An Efficient Kernel-level Isolation Execution Environment on AArch64 via Dynamically Adjusting Output Address Size

  2025cites this paper
• SH3ARS: Privilege Reduction for ARMv8.0-A Secure Monitors

  2025cites this paper
• Rethinking the confidential cloud through a unified low-level abstraction for composable isolation

  2025cites this paper
• Velosiraptor: Code Synthesis for Memory Translation

  2025cites this paper
• TeeFilter: High-Assurance Network Filtering Engine for High-End IoT and Edge Devices based on TEEs

  2024cites this paper
• PDIFT++: System-Wide Memory Tracking Using a Single-Process Memory Tracker

  2024cites this paper
• Profiling with trust: system monitoring from trusted execution environments

  2024cites this paper
• Intel Accelerators Ecosystem: An SoC-Oriented Perspective : Industry Product

  2024cites this paper
• Page-Oriented Programming: Subverting Control-Flow Integrity of Commodity Operating System Kernels with Non-Writable Code Pages

  2024influential citation
• HyperWallet: cryptocurrency wallet as a secure hypervisor-based application

  2024cites this paper
• SECvma: Virtualization-based Linux Kernel Protection for Arm

  2024cites this paper
• Kernel Code Integrity Protection at the Physical Address Level on RISC-V

  2023influential citation
• CARAT KOP: Towards Protecting the Core HPC Kernel from Linux Kernel Modules

  2023cites this paper
• SysFlow: Toward a Programmable Zero Trust Framework for System Security

  2023cites this paper
• Veil: A Protected Services Framework for Confidential Virtual Machines

  2023cites this paper
• DScope: To Reliably and Securely Acquire Live Data from Kernel-Compromised ARM Devices

  2023cites this paper
• Kernel-level Rootkit Detection, Prevention and Behavior Profiling: A Taxonomy and Survey

  2023cites this paper
• PDIFT: A Practical Dynamic Information-Flow Tracker

  2023cites this paper
• Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability

  2023cites this paper
• An internet of secure and private things: A service-oriented architecture

  2022cites this paper
• Rescuing the End-user systems from Vulnerable Applications using Virtualization Techniques

  2022cites this paper
• Survey of Approaches and Techniques for Security Verification of Computer Systems

  2022cites this paper
• Trusted Monitor: TEE-Based System Monitoring

  2022cites this paper
• H-KPP: Hypervisor-Assisted Kernel Patch Protection

  2022cites this paper
• Formal Modeling and Security Analysis for Intra-level Privilege Separation

  2022cites this paper
• Survey of Approaches for Security Verification of Hardware/Software Systems

  2022cites this paper
• Secure Mobile Agents on Embedded Boards: a TPM based solution

  2022cites this paper
• Hecate: Lifting and Shifting On-Premises Workloads to an Untrusted Cloud

  2022cites this paper
• Nanovised Control Flow Attestation

  2022influential citation
• Behind the last line of defense: Surviving SoC faults and intrusions

  2022cites this paper
• Detect keyloggers by using Machine Learning

  2022cites this paper
• Semi-Synchronized Non-Blocking Concurrent Kernel Cruising

  2022cites this paper
• CloudSkulk: A Nested Virtual Machine Based Rootkit and Its Detection

  2021cites this paper
• Hardware Secure Execution and Simulation Model Correlation using IFT on RISC-V

  2021cites this paper
• Advanced System Resiliency Based on Virtualization Techniques for IoT Devices

  2021cites this paper
• HyperKRP: A Kernel Runtime Security Architecture with A Tiny Hypervisor on Commodity Hardware

  2021cites this paper
• xTSeH: A Trusted Platform Module Sharing Scheme Towards Smart IoT-eHealth Devices

  2021cites this paper
• SOTPM: Software One-Time Programmable Memory to Protect Shared Memory on ARM Trustzone

  2021cites this paper
• Formally Verified Memory Protection for a Commodity Multiprocessor Hypervisor

  2021cites this paper
• HyperPass: Secure Password Input Platform

  2021cites this paper
• Preventing malicious communication using virtualization

  2021cites this paper
• GPU-based security of password hashing in cloud computing

  2021cites this paper
• A Coprocessor-Based Introspection Framework Via Intel Management Engine

  2021cites this paper
• DLP-Visor: A Hypervisor-based Data Leakage Prevention System

  2021cites this paper
• TSGX: Defeating SGX Side Channel Attack with Support of TPM

  2021cites this paper
• Challenges and pitfalls in malware research

  2021cites this paper
• Mitigation of Kernel Memory Corruption Using Multiple Kernel Memory Mechanism

  2021cites this paper
• Retrofitting the Partially Privileged Mode for TEE Communication Channel Protection

  2020cites this paper
• SelMon: reinforcing mobile device security with self-protected trust anchor

  2020cites this paper
• An enclave assisted snapshot-based kernel integrity monitor

  2020cites this paper
• Transcending the Teetering Tower of Trust: Demonstrated with Virtual Memory Fuses for Software Enclaves

  2020cites this paper
• IskiOS: Intra-kernel Isolation and Security using Memory Protection Keys.

  2020cites this paper
• On Architectural Support for Instruction Set Randomization

  2020cites this paper
• SECURITY IN CLOUD VIRTUALIZATION LAYER

  2020cites this paper
• Cross-VM network attacks & their countermeasures within cloud computing environments

  2020cites this paper
• Trusted computing theory and technology in innovation-driven development

  2020cites this paper
• Extensible Performance-Aware Runtime Integrity Measurement

  2020cites this paper
• Identification of Kernel Memory Corruption Using Kernel Memory Secret Observation Mechanism

  2020influential citation
• From Control Model to Program: Investigating Robotic Aerial Vehicle Accidents with MAYDAY

  2020cites this paper
• Enclave Computing Paradigm: Hardware-assisted Security Architectures & Applications

  2020cites this paper
• Information Systems Security and Privacy: 5th International Conference, ICISSP 2019, Prague, Czech Republic, February 23-25, 2019, Revised Selected Papers

  2020cites this paper
• RIPTE: Runtime Integrity Protection Based on Trusted Execution for IoT Device

  2020cites this paper
• JETFIRE: A Low-Cost, Trusted IoT Security Gateway

  2020cites this paper
• Additional kernel observer: privilege escalation attack prevention mechanism focusing on system call privilege changes

  2020cites this paper
• MKM: Multiple Kernel Memory for Protecting Page Table Switching Mechanism Against Memory Corruption

  2020cites this paper
• Single-Use Servers: A Generalized Design for Eliminating the Confused Deputy Problem in Networked Services

  2020cites this paper
• Secure System Virtualization: End-to-End Verification of Memory Isolation

  2020influential citation
• Behind the Last Line of Defense - Surviving SoC Faults and Intrusions

  2020cites this paper
• Security Issues and Challenges for Virtualization Technologies

  2020influential citation
• HART: Hardware-Assisted Kernel Module Tracing on Arm

  2020cites this paper
• Write-protection enforcement: hypervisor-backed kernel hardening

  2020cites this paper
• ferify: A Virtual Machine File Protection System against Zero-Day Attacks

  2020cites this paper
• Fine-Grained Isolation to Protect Data against In-Process Attacks on AArch64

  2020cites this paper
• Design of a symbolically executable embedded hypervisor

  2020cites this paper
• Lokke, a hybrid security hypervisor

  2020cites this paper
• überSpark

  2020cites this paper
• A Survey of Exploitation Techniques and Defenses for Program Data Attacks

  2020cites this paper
• Advances in Information and Computer Security: 15th International Workshop on Security, IWSEC 2020, Fukui, Japan, September 2–4, 2020, Proceedings

  2020cites this paper
• TF-BIV: transparent and fine-grained binary integrity verification in the cloud

  2019cites this paper
• Practical Security Properties on Commodity Computing Platforms: The uber eXtensible Micro-Hypervisor Framework

  2019cites this paper
• Efficient Protection for VDI Workstations

  2019cites this paper
• Computer Security – ESORICS 2019: 24th European Symposium on Research in Computer Security, Luxembourg, September 23–27, 2019, Proceedings, Part II

  2019influential citation
• Nighthawk: Transparent System Introspection from Ring -3

  2019cites this paper
• Micro-Hypervisor Applications

  2019cites this paper
• S<inline-formula><tex-math notation="LaTeX">$\mu$</tex-math><alternatives><mml:math><mml:mi>μ</mml:mi></mml:math><inline-graphic xlink:href="ammar-ieq1-2928541.gif"/></alternatives></inline-formula>V—The Security MicroVisor: A Formally-Verified Software-Based Security Architecture for the Internet o

  2019cites this paper
• Scaling symbolic evaluation for automated verification of systems code with Serval

  2019cites this paper
• The Uber eXtensible Micro-Hypervisor Framework (uberXMHF)

  2019cites this paper
• Protecting Cloud Virtual Machines from Hypervisor and Host Operating System Exploits

  2019cites this paper
• DeviceVeil: Robust Authentication for Individual USB Devices Using Physical Unclonable Functions

  2019cites this paper
• SATIN: A Secure and Trustworthy Asynchronous Introspection on Multi-Core ARM Processors

  2019cites this paper
• In-process Memory Isolation Using Hardware Watchpoint

  2019cites this paper
• “VANILLA” malware: vanishing antiviruses by interleaving layers and layers of attacks

  2019cites this paper
• Binary-centric defense of production operating systems against kernel queue injection attacks

  2019cites this paper
• iCore: continuous and proactive extrospection on multi-core IoT devices

  2019cites this paper
• Hypervisor Memory Introspection and Hypervisor Based Malware Honeypot

  2019cites this paper
• A cloud computing separation model based on information flow

  2019cites this paper
• Kernel Virtual Memory Switching Protection for Illegal Memory Corruption via Kernel Vulnerability

  2019cites this paper
• A Survey on Insider Attacks in IAAS-Based Cloud

  2019cites this paper
• A Cloud Computing Security Model Based on Noninterference

  2019cites this paper
• Fast Intra-kernel Isolation and Security with IskiOS

  2019cites this paper