▼
Showing posts with label Hypervisor. Show all posts
Showing posts with label Hypervisor. Show all posts
Tuesday, June 09, 2015

How to enable CoreOS to boot on top of iKGT (Intel Kernel Guard Technology) ?

›
Linked to here:  https://01.org/intel-kgt/blogs  or  https://01.org/intel-kgt/blogs/bzhu5/2015/coreos-ikgt <END>

Intel Kernel Guard Technology is released as opensource software

›
See the official site for details: https://01.org/intel-kgt <END>
Friday, November 21, 2014

Defending Against ret2dir Attacks (partially) with Virtualization Technology?

›
I was so excited when recently reading the paper ( ret2dir: Rethinking Kernel Isolation ) from  Vasileios P. Kemerlis . This post is basical...
Wednesday, November 12, 2014

How to Implement a software-based SMEP(Supervisor Mode Execution Protection) with Virtualization/Hypervisor Technology

›
As my previous post indicated, SMEP is a powerful security feature, and easy to deploy in modern commodity OS. However this feature require...
Saturday, November 08, 2014

Using LBR (Last Branch Record) Feature to Detect IDT-Shadowing-Based Malicious IDT Hooking

›
Thanks to Yushi  who shared a presentation ( ELI: Bare-Metal Performance for I/O Virtualization ) with me. In that hypervisor (ELI), it inno...
Thursday, November 06, 2014

Monitor Trap Flag (MTF) Usage in EPT-based Guest Physical Memory Monitoring

›
Monitor Trap Flag (MTF) is a flag specifically designed for single-stepping in x86/Intel hardware virtualization VT-x technology. When MTF i...
2 comments:
Wednesday, November 05, 2014

BitVisor - A Thin Hypervisor Built for Enforcing I/O Device Security - Storage (USB/DISK) Encryption or File Access Monitoring

›
This post is wrote to share an idea of the paper ( BitVisor: A Thin Hypervisor for Enforcing I/O Device Security ) that I read recently. It ...
5 comments:
Tuesday, November 04, 2014

XEN PVH Virtualization Mode - "What Color Is Your Xen?"

›
In my previous post Why smaller code size with XEN on ARM? , one of reasons I explained is that XEN on x86 must support different guest work...
Monday, November 03, 2014

Unikernels: Library Operating Systems for the Cloud (OSv)

›
Unlike a general-purpose, commercial operating system (like Windows, Ubuntu), OSv ( http://osv.io/ from cloudius-systems) is a single-purpo...

Debugging Bug Check (BSOD) 0x101 CLOCK_WATCHDOG_TIMEOUT in a Hypervisor/VMM Environment

›
I'm planning to write a post for debugging  Bug Check 0x101 issue (CLOCK_WATCHDOG_TIMEOUT) in Windows system. but I happened to find th...
Friday, October 17, 2014

Enable UEFI Firmware BIOS and Debug Xen/EFI on VMware Player

›
Since VMware product (e.g. Player) now supports nested  virtualization  VT-x/VMX , recently I wanted to use this feature to debug XEN w/ EFI...
Sunday, September 28, 2014

Why smaller code size with XEN on ARM?

›
This white paper ( Xen ARM with Virtualization Extensions whitepaper )  indicates that " Xen on ARM is 1/6 of the code size of x86_64 X...
Friday, August 15, 2014

Monitor/Trap Software Interrupt INT 80h (System Call) with x86/Intel Virtualization Technology

›
In an unix-like system, before syscall/sysret and/or sysenter/sysexit instructions were introduced by x86/Intel processors, software interru...
Friday, April 11, 2014

Yet Another Solution to Monitor/Trap SYSCALL with Virtualization Technology (x86)

›
This article describes an idea to monitor SYSCALL with x86 Hardware Virtualization Technology. It doesn't require visible guest code/dat...
Wednesday, April 02, 2014

Thoughts on VMXON and VMCS regions in VT-x (from security's point of view)

›
Previously when I was working on a Hypervisor based on Intel VT-x. I always did exactly as what I'm told to do in the VT-x specification...
3 comments: