Title
Virtual Machine Monitor-based Hiding Method for Access to Debug Registers
Abstract
To secure a guest operating system running on a virtual machine (VM), a monitoring method using hardware breakpoints by a virtual machine monitor is required. However, debug registers are visible to guest operating systems; thus, malicious programs on a guest operating system can detect or disable the monitoring method. This paper presents a method to hide access to debug registers from programs running on a VM. Our proposed method detects programs' access to debug registers and disguises the access as having succeeded. The register's actual value is not visible or modifiable to programs, so the monitoring method is hidden. This paper presents the basic design and evaluation results of our method.
Year
DOI
Venue
2020
10.1109/CANDAR51075.2020.00036
2020 Eighth International Symposium on Computing and Networking (CANDAR)
Keywords
DocType
ISSN
virtual machine monitor,debug register,system security
Conference
2379-1888
ISBN
Citations 
PageRank 
978-1-7281-8222-3
1
0.37
References 
Authors
0
3
Name
Order
Citations
PageRank
Masaya Sato110.37
Hideo Taniguchi25230.01
Ryosuke Nakamura36821.87