Open Daily: 10am - 10pm | Alley door pickup 10am - 7pm 3038 Hennepin Ave Minneapolis, MN
612-822-4611

  • Open Daily: 10am - 10pm
    Alley-side Pickup: 10am - 7pm

    3038 Hennepin Ave Minneapolis, MN
    612-822-4611

Open Daily: 10am - 10pm | Alley-side Pickup: 10am - 7pm
3038 Hennepin Ave Minneapolis, MN
612-822-4611
Automated Virtual Machine Introspection for Host-Based Intrusion Detection

Automated Virtual Machine Introspection for Host-Based Intrusion Detection

Pagel, Brett A.

Paperback

General EducationOperating SystemsComputer Security

ISBN10: 1249836425
ISBN13: 9781249836421
Publisher: Biblioscholar
Published: Oct 17 2012
Pages: 106
Weight: 0.35
Height: 0.22 Width: 6.14 Depth: 9.21
Language: English
This thesis examines techniques to automate configuration of an intrusion detection system utilizing hardware-assisted virtualization. These techniques are used to detect the version of a running guest operating system, automatically configure version-specific operating system information needed by the introspection library, and to locate and monitor important operating system data structures. This research simplifies introspection library configuration and is a step toward operating system independent introspection. An operating system detection algorithm and Windows virtual machine system service dispatch table monitor are implemented using the Xen hypervisor and a modified version of the XenAccess library. All detection and monitoring is implemented from the Xen management domain.

Also in

General Education

View All