Catch you with cache: Out-of-VM introspection to trace malicious executions

• Main Authors: SU, Chao, DING, Xuhua, ZENG, Qinghai
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2021
• Subjects: Out-of-VM Introspection; Cache; Malware Analysis; Non-intrusiveness; Transparency; Databases and Information Systems; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/6737; https://ink.library.smu.edu.sg/context/sis_research/article/7740/viewcontent/357200a326.pdf
• Institution: Singapore Management University

Out-of-VM introspection is an imperative part of security analysis. The legacy methods either modify the system, introducing enormous overhead, or rely heavily on hardware features, which are neither available nor practical in most cloud environments. In this paper, we propose a novel analysis metho...