.png){kind=icon}
返回
Checking Function-Level Kernel Control Flow Integrity for Cloud Computing
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2018.2859767.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
With the advancement of cloud computing, the control flow integrity (CFI) of virtual machines' kernel becomes more and more important for the security of cloud services. Many CFI checking and protecting approaches have been proposed. Among them, dynamic analysis approaches have the best detection capability, but they are rarely used because of the high overhead introduced to the virtual machines to be monitored. In this paper, we propose a function-level kernel CFI checking approach to meet the performance requirements in the cloud. By combining the static memory analysis and the dynamic tracing, our system can achieve high detection capability with low overhead. Since the analysis and tracing targets of our system are kernel functions, our system incurs lower overhead to the monitored virtual machines than the instruction-level monitors. We propose two models to describe the kernel control flows. After building the secure control flow database by learning the normal behaviors, we can detect abnormal control flows in real time. With the help of virtualization and virtual machine introspection techniques, we implement a prototype system in the hardware virtualization environment. From the evaluation, our system has high detection capability with reasonable overhead.
Keyword:
Control flow integrity
function-level analysis
virtual machine introspection
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Type I nitric oxide synthase fully accounts for nadph-diaphorase in rat striatum, but not cortex.png)
Neuroscience
NeuroscienceIF0
PREAI
分享收藏DCFI-Checker: Checking Kernel Dynamic Control Flow Integrity with Performance Monitoring CounterCHINA COMMUNICATIONS
CHINA COMMUNICATIONSIF3.1
PREAI
分享收藏A Routing-Driven Elliptic Curve Cryptography Based Key Management Scheme for Heterogeneous Sensor Networks基于路由驱动的椭圆曲线密码体制的异构传感器网络密钥管理方案
PREAI
分享收藏
查看更多内容