Seeing through the same lens: Introspecting guest address space at native speed

• Main Authors: ZHAO, Siqi, DING, Xuhua, XU, Wen, GU, Dawu
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2017
• Subjects: Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/4168; https://ink.library.smu.edu.sg/context/sis_research/article/5171/viewcontent/sec17_zhao.pdf
• Institution: Singapore Management University

Software-based MMU emulation lies at the heart of out-of-VM live memory introspection, an important technique in the cloud setting that applications such as live forensics and intrusion detection depend on. Due to the emulation, the software-based approach is much slower compared to native memory ac...