Barrier: A lightweight hypervisor for protecting kernel integrity via memory isolation

Jingyu Hua, Kouichi Sakurai

研究成果: Chapter in Book/Report/Conference proceedingConference contribution

9 被引用数 (Scopus)

抄録

In the present operating systems such as Linux, all the kernel modules, including unknown extensions, run in the same address space. They are granted the highest privilege and can access arbitrary memory without any limitation. This is at the root of kernel rootkits, which are malware seriously threatening the kernel integrity. In this paper, we present Barrier, a lightweight hypervisor designed for enhancing the kernel integrity of personal computers by isolating the kernel modules. Since this hypervisor is designed for the OS protection on PCs, it does not implement unnecessary virtualization features that are commonly found on the general-purpose hypervisors to support running multiple OS instances concurrently on the same server. As a result, it is much smaller and also much easier to use, especially for unprofessional users. Barrier leverages the hardware-supported memory virtualization to isolate the kernel modules into different address spaces. All the interactions across address spaces have to go through a strict mediation based on some predefined MAC rules. This greatly increases the attacker's hardness to compromise the kernel integrity. We have implemented a prototype of Barrier. The evaluation results show that Barrier can well protect the kernel integrity without bringing unaffordable performance overheads.

本文言語英語
ホスト出版物のタイトル27th Annual ACM Symposium on Applied Computing, SAC 2012
ページ1470-1477
ページ数8
DOI
出版ステータス出版済み - 2012
イベント27th Annual ACM Symposium on Applied Computing, SAC 2012 - Trento, イタリア
継続期間: 3 26 20123 30 2012

出版物シリーズ

名前Proceedings of the ACM Symposium on Applied Computing

その他

その他27th Annual ACM Symposium on Applied Computing, SAC 2012
国/地域イタリア
CityTrento
Period3/26/123/30/12

All Science Journal Classification (ASJC) codes

  • ソフトウェア

フィンガープリント

「Barrier: A lightweight hypervisor for protecting kernel integrity via memory isolation」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル