return-oriented programming attack on the xen hypervisor
文献类型：会议论文
| 作者 | Ding Baozeng ; Wu Yanjun ; He Yeping ; Tian Shuo ; Guan Bei ; Wu Guowei |
| 出版日期 | 2012 |
| 会议名称 | 2012 7th International Conference on Availability, Reliability and Security, ARES 2012 |
| 会议日期 | August 20, 2012 - August 24, 2012 |
| 会议地点 | Prague, Czech republic |
| 页码 | 479-484 |
| 中文摘要 | In this paper, we present an approach to attackon the Xen hypervisor utilizing return-oriented programming(ROP). It modifies the data in the hypervisor that controlswhether a VM is privileged or not and thus can escalatethe privilege of an unprivileged domain (domU) at runtime. As ROP technique makes use of existed code to implementattack, not modifying or injecting any code, it canbypass the integrity protections that base on code measurement. By constructing such kind of attack at the virtualizationlayer, it can motivate further research work towardspreventing or detecting ROP attack on the hypervisor. © 2012 IEEE. |
| 英文摘要 | In this paper, we present an approach to attackon the Xen hypervisor utilizing return-oriented programming(ROP). It modifies the data in the hypervisor that controlswhether a VM is privileged or not and thus can escalatethe privilege of an unprivileged domain (domU) at runtime. As ROP technique makes use of existed code to implementattack, not modifying or injecting any code, it canbypass the integrity protections that base on code measurement. By constructing such kind of attack at the virtualizationlayer, it can motivate further research work towardspreventing or detecting ROP attack on the hypervisor. © 2012 IEEE. |
| 收录类别 | EI |
| 会议录 | Proceedings - 2012 7th International Conference on Availability, Reliability and Security, ARES 2012
 |
| 语种 | 英语 |
| ISBN号 | 9780769547756 |
| 源URL | [http://ir.iscas.ac.cn/handle/311060/15817]  |
| 专题 | 软件研究所_软件所图书馆_会议论文 |
| 推荐引用方式 GB/T 7714 | Ding Baozeng,Wu Yanjun,He Yeping,et al. return-oriented programming attack on the xen hypervisor[C]. 见:2012 7th International Conference on Availability, Reliability and Security, ARES 2012. Prague, Czech republic. August 20, 2012 - August 24, 2012. |
入库方式： OAI收割
来源：软件研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。