Hypervisor-Based White Listing of Executables

Roee S. Leon; Michael Kiperberg; Anat Anatey Leon Zabag; Amit Resh; Asaf Algawi; Nezer J. Zaidenberg

doi:10.1109/MSEC.2019.2910218

Hypervisor-Based White Listing of Executables

Roee S. Leon
, Michael Kiperberg
, Anat Anatey Leon Zabag
, Amit Resh
, Asaf Algawi
, Nezer J. Zaidenberg

Research output: Contribution to journal › Article › peer-review

Abstract

We describe an efficient system for ensuring code integrity of an operating system (OS), both its own code and application code. The proposed system can protect from an attacker who has full control over the OS kernel. An evaluation of the system's performance suggests the induced overhead is negligible.

Original language	English
Article number	8708283
Pages (from-to)	58-67
Number of pages	10
Journal	IEEE Security and Privacy
Volume	17
Issue number	5
DOIs	https://doi.org/10.1109/MSEC.2019.2910218
State	Published - 1 Sep 2019
Externally published	Yes

ASJC Scopus subject areas

Computer Networks and Communications
Electrical and Electronic Engineering
Law

Access to Document

10.1109/MSEC.2019.2910218

Cite this

@article{7abc83f3742f401c964b816dad74f1a6,

title = "Hypervisor-Based White Listing of Executables",

abstract = "We describe an efficient system for ensuring code integrity of an operating system (OS), both its own code and application code. The proposed system can protect from an attacker who has full control over the OS kernel. An evaluation of the system's performance suggests the induced overhead is negligible.",

author = "Leon, \{Roee S.\} and Michael Kiperberg and \{Leon Zabag\}, \{Anat Anatey\} and Amit Resh and Asaf Algawi and Zaidenberg, \{Nezer J.\}",

note = "Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2019",

month = sep,

day = "1",

doi = "10.1109/MSEC.2019.2910218",

language = "English",

volume = "17",

pages = "58--67",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "5",

}

TY - JOUR

T1 - Hypervisor-Based White Listing of Executables

AU - Leon, Roee S.

AU - Kiperberg, Michael

AU - Leon Zabag, Anat Anatey

AU - Resh, Amit

AU - Algawi, Asaf

AU - Zaidenberg, Nezer J.

PY - 2019/9/1

Y1 - 2019/9/1

N2 - We describe an efficient system for ensuring code integrity of an operating system (OS), both its own code and application code. The proposed system can protect from an attacker who has full control over the OS kernel. An evaluation of the system's performance suggests the induced overhead is negligible.

AB - We describe an efficient system for ensuring code integrity of an operating system (OS), both its own code and application code. The proposed system can protect from an attacker who has full control over the OS kernel. An evaluation of the system's performance suggests the induced overhead is negligible.

UR - https://www.scopus.com/pages/publications/85065636941

U2 - 10.1109/MSEC.2019.2910218

DO - 10.1109/MSEC.2019.2910218

M3 - Article

SN - 1540-7993

VL - 17

SP - 58

EP - 67

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

IS - 5

M1 - 8708283

ER -

Hypervisor-Based White Listing of Executables

Abstract

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this