Name
Title | ||
|---|---|---|
CPU transparent protection of OS kernel and hypervisor integrity with programmable DRAM |
Abstract | ||
|---|---|---|
Increasingly, cyber attacks (e.g., kernel rootkits) target the inner rings of a computer system, and they have seriously undermined the integrity of the entire computer systems. To eliminate these threats, it is imperative to develop innovative solutions running below the attack surface. This paper presents MGuard, a new most inner ring solution for inspecting the system integrity that is directly integrated with the DRAM DIMM devices. More specifically, we design a programmable guard that is integrated with the advanced memory buffer of FB-DIMM to continuously monitor all the memory traffic and detect the system integrity violations. Unlike the existing approaches that are either snapshot-based or lack compatibility and flexibility, MGuard continuously monitors the integrity of all the outer rings including both OS kernel and hypervisor of interest, with a greater extendibility enabled by a programmable interface. It offers a hardware drop-in solution transparent to the host CPU and memory controller. Moreover, MGuard is isolated from the host software and hardware, leading to strong security for remote attackers. Our simulation-based experimental results show that MGuard introduces no speed overhead, and is able to detect nearly all the OS-kernel and hypervisor control data related rootkits we tested. |
Year | DOI | Venue |
|---|---|---|
2013 | 10.1145/2485922.2485956 | ISCA |
Keywords | Field | DocType |
hypervisor integrity,hardware drop-in solution,system integrity violation,cpu transparent protection,os kernel,programmable dram,computer system,memory traffic,entire computer system,system integrity,host cpu,advanced memory buffer,memory controller,hardware security,computer architecture | Hardware security module,Computer science,Hypervisor,System integrity,Real-time computing,Memory controller,DIMM,Storage hypervisor,Parallel computing,Rootkit,Memory buffer register,Operating system,Embedded system | Conference |
Volume | Issue | ISSN |
41 | 3 | 0163-5964 |
Citations | PageRank | References |
20 | 0.73 | 29 |
Authors | ||
6 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ziyi Liu | 1 | 39 | 4.18 |
| JongHyuk Lee | 2 | 97 | 10.51 |
| Junyuan Zeng | 3 | 84 | 4.20 |
| Yuanfeng Wen | 4 | 68 | 7.99 |
| Zhiqiang Lin | 5 | 1082 | 64.49 |
| Weidong Shi | 6 | 331 | 41.44 |