CPU Transparent Protection of OS Kernel and Hypervisor Integrity with Programmable DRAM
| dc.contributor.advisor | Shi, Weidong | |
| dc.contributor.committeeMember | Huang, Stephen | |
| dc.contributor.committeeMember | Lin, Zhiqiang | |
| dc.creator | Liu, Ziyi 1988- | |
| dc.date.accessioned | 2013-12-02T23:06:59Z | |
| dc.date.available | 2013-12-02T23:06:59Z | |
| dc.date.created | August 2013 | |
| dc.date.issued | 2013-08 | |
| dc.date.updated | 2013-12-02T23:07:05Z | |
| dc.description.abstract | Increasingly, cyber attacks (e.g., kernel rootkits) target the inner rings of a computer system, and they have seriously undermined the integrity of the entire computer system. To eliminate these threats, it is imperative to develop innovative solutions running below the attack surface. This paper presents MGuard, a new most inner ring solution for inspecting the system integrity that is directly integrated with the DRAM DIMM devices. More specifically, we design a programmable guard that is integrated with the advanced memory buffer of FB-DIMM to continuously monitor all the memory traffic and detect the system integrity violations. Unlike the existing approaches that are either snapshot-based or lack compatibility and flexibility, MGuard continuously monitors the integrity of all the outer rings including both OS kernel and hypervisor of interest, with a greater extendibility enabled by a programmable interface. It offers a hardware drop-in solution transparent to the host CPU and memory controller. Moreover, MGuard is isolated from the host software and hardware, leading to strong security for remote attackers. Our simulation-based experimental results show that MGuard introduces no speed overhead, and is able to detect nearly all the OS-kernel and hypervisor control data related rootkits we tested. | |
| dc.description.department | Computer Science, Department of | |
| dc.format.digitalOrigin | born digital | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.uri | http://hdl.handle.net/10657/478 | |
| dc.language.iso | eng | |
| dc.rights | The author of this work is the copyright owner. UH Libraries and the Texas Digital Library have their permission to store and provide access to this work. Further transmission, reproduction, or presentation of this work is prohibited except with permission of the author(s). | |
| dc.subject | Hardware Security | |
| dc.subject | Computer Architecture | |
| dc.subject.lcsh | Computer science | |
| dc.title | CPU Transparent Protection of OS Kernel and Hypervisor Integrity with Programmable DRAM | |
| dc.type.dcmi | Text | |
| dc.type.genre | Thesis | |
| thesis.degree.college | College of Natural Sciences and Mathematics | |
| thesis.degree.department | Computer Science, Department of | |
| thesis.degree.discipline | Computer Science | |
| thesis.degree.grantor | University of Houston | |
| thesis.degree.level | Masters | |
| thesis.degree.name | Master of Science |