利用可信赖执行技术防范基于hypervisor的rootkit

Preventing Hypervisor-based Rootkit with Trusted Execution Technology

虚拟化技术的发展和应用,给虚拟机的安全带来了新的威胁和挑战。论文深入研究和分析了针对虚拟机的rootkit攻击以及虚拟机监控软件(hypervisor)面临的安全风险,提出了检测和防范rookit攻击的方法。结合可信赖执行技术(TXT)的特点,给出了防范基于hypervisor的rootkit的方法和步骤,并探讨了虚拟机安全的发展趋势和下一步的研究方向。

Development and applications of virtualization technology have brought new threats and challenges to virtual machine security. In this paper, the rootkit attacks on virtual machine and the security risks faced by hypervisor are studied and analyzed in detail. And the methods for detecting and analyzing rookit attacks are proposed. In combination with Trusted Execution Technology（TXT） characteristics, the methods and procedures in preventing hypervisor-based rootkit are given. Finally, the development trends of virtual machine security and its further research directions are discussed.