Remote detection of virtual machine monitors with fuzzy benchmarking-Reference-Cited by-同舟云学术

Remote detection of virtual machine monitors with fuzzy benchmarking

Published:2008-04 Issue:3 Volume:42 Page:83-92
ISSN:0163-5980
Container-title:ACM SIGOPS Operating Systems Review
language:en
Short-container-title:SIGOPS Oper. Syst. Rev.

Author:

Franklin Jason¹,Luk Mark¹,McCune Jonathan M.¹,Seshadri Arvind¹,Perrig Adrian¹,van Doorn Leendert²

Affiliation:

1. Carnegie Mellon University

2. Advanced Micro Devices

Abstract

We study the remote detection of virtual machine monitors (VMMs) across the Internet, and devise fuzzy benchmarking as an approach that can successfully detect the presence or absence of a VMM on a remote system. Fuzzy benchmarking works by making timing measurements of the execution time of particular code sequences executing on the remote system. The fuzziness comes from heuristics which we employ to learn characteristics of the remote system's hardware and VMM configuration. Our techniques are successful despite uncertainty about the remote machine's hardware configuration.

Publisher

Association for Computing Machinery (ACM)

Link

https://dl.acm.org/doi/pdf/10.1145/1368506.1368518

Reference21 articles.

1. A comparison of software and hardware techniques for x86 virtualization

2. D. Boggs A. Baktha J. Hawkins D. T. Marr J. A. Miller P. Roussel Singhal R B. Toll and K. S. Venkatraman. The microarchitecture of the Intel Pentium 4 processor on 90nm technology. Intel Technology Journal 8(1) February 2004. D. Boggs A. Baktha J. Hawkins D. T. Marr J. A. Miller P. Roussel Singhal R B. Toll and K. S. Venkatraman. The microarchitecture of the Intel Pentium 4 processor on 90nm technology. Intel Technology Journal 8(1) February 2004.

3. Advanced Micro Devices. AMD64 virtualization: Secure virtual machine architecture reference manual. AMD Publication no. 33047 rev. 3.01 May 2005. Advanced Micro Devices. AMD64 virtualization: Secure virtual machine architecture reference manual. AMD Publication no. 33047 rev. 3.01 May 2005.

Cited by 21 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Scramblesuit: An effective timing side-channels framework for malware sandbox evasion1;Journal of Computer Security;2022-11-23

2. Hypervisor-assisted dynamic malware analysis;Cybersecurity;2021-06-02

3. Virtual Machine Extrospection: A Reverse Information Retrieval in Clouds;IEEE Transactions on Cloud Computing;2021-01-01

4. PoW-How: An Enduring Timing Side-Channel to Evade Online Malware Sandboxes;Computer Security – ESORICS 2021;2021

5. Detection of Virtual Machines Based on Thread Scheduling;Lecture Notes in Computer Science;2021