TY - GEN
T1 - Virtual Machine Monitor-based Hiding Method for Access to Debug Registers
AU - Sato, Masaya
AU - Taniguchi, Hideo
AU - Nakamura, Ryosuke
N1 - Funding Information:
ACKNOWLEDGMENT This work was partially supported by JSPS KAKENHI grant numbers JP18K18051 and JP19H04109.
Publisher Copyright:
© 2020 IEEE
PY - 2020/11
Y1 - 2020/11
N2 - To secure a guest operating system running on a virtual machine (VM), a monitoring method using hardware breakpoints by a virtual machine monitor is required. However, debug registers are visible to guest operating systems; thus, malicious programs on a guest operating system can detect or disable the monitoring method. This paper presents a method to hide access to debug registers from programs running on a VM. Our proposed method detects programs’ access to debug registers and disguises the access as having succeeded. The register’s actual value is not visible or modifiable to programs, so the monitoring method is hidden. This paper presents the basic design and evaluation results of our method.
AB - To secure a guest operating system running on a virtual machine (VM), a monitoring method using hardware breakpoints by a virtual machine monitor is required. However, debug registers are visible to guest operating systems; thus, malicious programs on a guest operating system can detect or disable the monitoring method. This paper presents a method to hide access to debug registers from programs running on a VM. Our proposed method detects programs’ access to debug registers and disguises the access as having succeeded. The register’s actual value is not visible or modifiable to programs, so the monitoring method is hidden. This paper presents the basic design and evaluation results of our method.
KW - Debug register
KW - System security
KW - Virtual machine monitor
UR - http://www.scopus.com/inward/record.url?scp=85104622779&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85104622779&partnerID=8YFLogxK
U2 - 10.1109/CANDAR51075.2020.00036
DO - 10.1109/CANDAR51075.2020.00036
M3 - Conference contribution
AN - SCOPUS:85104622779
T3 - Proceedings - 2020 8th International Symposium on Computing and Networking, CANDAR 2020
SP - 209
EP - 214
BT - Proceedings - 2020 8th International Symposium on Computing and Networking, CANDAR 2020
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 8th International Symposium on Computing and Networking, CANDAR 2020
Y2 - 24 November 2020 through 27 November 2020
ER -