A coprocessor-based introspection framework via intel management engine

• Main Authors: ZHOU, Lei, ZHANG, Fengwei, XIAO, Jidong, LEACH, Kevin, WEIMER, Westley, DING, Xuhua, WANG, Guojun
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2021
• Subjects: Intel ME; system management mode; introspection; integrity; transparency; Databases and Information Systems; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/6734; https://ink.library.smu.edu.sg/context/sis_research/article/7737/viewcontent/A_Coprocessor_Based_Introspection_Framework_Via_Intel_Management_Engine.pdf
• Institution: Singapore Management University

During the past decade, virtualization-based (e.g., virtual machine introspection) and hardware-assisted approaches (e.g., x86 SMM and ARM TrustZone) have been used to defend against low-level malware such as rootkits. However, these approaches either require a large Trusted Computing Base (TCB) or...