Building reliable and secure virtual machines using architectural invariants

Cuong Pham; Zachary J. Estrada; Phuong Cao; Zbigniew Kalbarczyk; Ravishankar K. Iyer

doi:10.1109/MSP.2014.87

Building reliable and secure virtual machines using architectural invariants

Cuong Pham, Zachary J. Estrada, Phuong Cao, Zbigniew Kalbarczyk, Ravishankar K. Iyer

Research output: Contribution to journal › Article › peer-review

Abstract

HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.

Original language	English (US)
Article number	6924639
Pages (from-to)	82-85
Number of pages	4
Journal	IEEE Security and Privacy
Volume	12
Issue number	5
DOIs	https://doi.org/10.1109/MSP.2014.87
State	Published - Sep 2014

Keywords

HyperTap
hang detection
hangs
hardware architectural invariants
hardware-assisted virtualization
privilege escalation
reliability
rootkits
security
virtual machines
virtual-machine introspection

ASJC Scopus subject areas

Computer Networks and Communications
Electrical and Electronic Engineering
Law

Access to Document

10.1109/MSP.2014.87

Cite this

@article{a50d7b473fe2480994713699654e93fc,

title = "Building reliable and secure virtual machines using architectural invariants",

abstract = "HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.",

keywords = "HyperTap, hang detection, hangs, hardware architectural invariants, hardware-assisted virtualization, privilege escalation, reliability, rootkits, security, virtual machines, virtual-machine introspection",

author = "Cuong Pham and Estrada, {Zachary J.} and Phuong Cao and Zbigniew Kalbarczyk and Iyer, {Ravishankar K.}",

note = "Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2014",

month = sep,

doi = "10.1109/MSP.2014.87",

language = "English (US)",

volume = "12",

pages = "82--85",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "5",

}

TY - JOUR

T1 - Building reliable and secure virtual machines using architectural invariants

AU - Pham, Cuong

AU - Estrada, Zachary J.

AU - Cao, Phuong

AU - Kalbarczyk, Zbigniew

AU - Iyer, Ravishankar K.

PY - 2014/9

Y1 - 2014/9

N2 - HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.

AB - HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.

KW - HyperTap

KW - hang detection

KW - hangs

KW - hardware architectural invariants

KW - hardware-assisted virtualization

KW - privilege escalation

KW - reliability

KW - rootkits

KW - security

KW - virtual machines

KW - virtual-machine introspection

UR - http://www.scopus.com/inward/record.url?scp=84908222863&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84908222863&partnerID=8YFLogxK

U2 - 10.1109/MSP.2014.87

DO - 10.1109/MSP.2014.87

M3 - Article

AN - SCOPUS:84908222863

VL - 12

SP - 82

EP - 85

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

SN - 1540-7993

IS - 5

M1 - 6924639

ER -

Building reliable and secure virtual machines using architectural invariants

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other links

Fingerprint

Cite this