Systemic threats to hypervisor non-control data

ISCAS OpenIR

	Systemic threats to hypervisor non-control data
	Ding, Baozeng; He, Yeping; Wu, Yanjun; Yu, Jiageng
	2013
发表期刊	IET INFORMATION SECURITY
ISSN	1751-8709
卷号	7 期号:4 页码:349-354
摘要	Hypervisors are becoming a widespread virtualisation layer in current computer systems. Recent successful attacks against hypervisors indicate that they face the similar integrity threats as traditional operating systems. Current approaches that secure hypervisors mainly focus on code or control-data integrity, without paying attention to non-control data integrity. In this study the authors construct attacks that target hypervisor non-control data to demonstrate which types of data within the Xen hypervisor are critical to system security. It shows privilege, resource utilisation and security policy related data are vulnerable to return-oriented programming or DMA attacks. By modifying their values from one to another, the whole system's performance will be affected. By discussing current approaches that secure hypervisors, which are not suitable for non-control data, the work is to motivate new innovation in this area to protect them.; Hypervisors are becoming a widespread virtualisation layer in current computer systems. Recent successful attacks against hypervisors indicate that they face the similar integrity threats as traditional operating systems. Current approaches that secure hypervisors mainly focus on code or control-data integrity, without paying attention to non-control data integrity. In this study the authors construct attacks that target hypervisor non-control data to demonstrate which types of data within the Xen hypervisor are critical to system security. It shows privilege, resource utilisation and security policy related data are vulnerable to return-oriented programming or DMA attacks. By modifying their values from one to another, the whole system's performance will be affected. By discussing current approaches that secure hypervisors, which are not suitable for non-control data, the work is to motivate new innovation in this area to protect them.
收录类别	SCI
关键词	Data Integrity Security Of Data Virtualisation Systemic Threats Hypervisor Noncontrol Data Virtualisation Layer Computer Systems Secure Hypervisors Data Integrity Xen Hypervisor System Security Return-oriented Programming Dma Attacks
部门归属	[Ding, Baozeng; He, Yeping; Wu, Yanjun; Yu, Jiageng] Chinese Acad Sci, Inst Software, Natl Engn Res Ctr Fundamental Software, Beijing 100190, Peoples R China. [Ding, Baozeng; Yu, Jiageng] Chinese Acad Sci, Grad Univ, Beijing 100049, Peoples R China.
语种	英语
WOS记录号	WOS:000328457400012
引用统计	被引频次：8[WOS] [WOS记录] [WOS相关记录]
内容类型	期刊论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16896
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Ding, Baozeng,He, Yeping,Wu, Yanjun,et al. Systemic threats to hypervisor non-control data[J]. IET INFORMATION SECURITY,2013,7(4):349-354.
APA	Ding, Baozeng,He, Yeping,Wu, Yanjun,&Yu, Jiageng.(2013).Systemic threats to hypervisor non-control data.IET INFORMATION SECURITY,7(4),349-354.
MLA	Ding, Baozeng,et al."Systemic threats to hypervisor non-control data".IET INFORMATION SECURITY 7.4(2013):349-354.