NDLI: Virtual machine introspection based spurious process detection in virtualized cloud computing environment

Content Provider	IEEE Xplore Digital Library
Author	Ajay Kumara, M.A. Jaidhar, C.D.
Copyright Year	2015
Description	Author affiliation: Dept. of Inf. Technol., Nat. Inst. of Technol., Mangalore, India (Ajay Kumara, M.A.; Jaidhar, C.D.)
Abstract	Virtual Machines are prime target for adversary to take control by exploiting the identified vulnerability present in it. Due to increasing number of Advanced Persistent Attacks such as malware, rootkit, spyware etc., virtual machine protection is highly challenging task. The key element of Advanced Persistent Threat is rootkit that provides stealthy control of underlining Operating System (kernel). Protecting individual guest operating system by using antivirus and commercial security defense mechanism is cost effective and ineffective for virtualized environment. To solve this problem, Virtual Machine Introspection has emerged as one of the promising approaches to secure the state of the virtual machine. Virtual Machine Introspection inspects the state of multiple virtual machines by operating outside the virtual machine i.e. at hypervisor level. In this work, Virtual Machine Introspection based malicious process detection approach is proposed. It extracts the high level information such as system call details, opened known backdoor ports from introspected memory to identify the spurious process. It triggers an alert in response to detected intrusion.
Starting Page	309
Ending Page	315
File Size	655234
Page Count	7
File Format	PDF
e-ISBN	9781479984336
DOI	10.1109/ABLAZE.2015.7155003
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-02-25
Publisher Place	India
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Virtual machine monitors Hypervisor Ports (Computers) Semantic Gap Virtual Machine Introspection Virtual machining Malware Kernel Virtualization Monitoring Rootkit Virtual Machine
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Hypervisor and virtual machine dependent Intrusion Detection and Prevention System for virtualized cloud environment

Detection of Malware and Kernel-Level Rootkits in Cloud Computing Environments

Execution Time Measurement of Virtual Machine Volatile Artifacts Analyzers

Integrity Based Intrusion Detection System for Enterprise and Cloud Environments

Detecting Malware and Rootkit via Memory Forensics

Monitoring of malefactor's activity in virtualized honeypots on the base of semantic transformation in Qemu hypervisor

Forensic Virtual Machines: Dynamic Defence in the Cloud via Introspection

Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection

A cooperative botnet profiling and detection in virtualized environment

Virtual machine introspection based spurious process detection in virtualized cloud computing environment

Similar Documents

Hypervisor and virtual machine dependent Intrusion Detection and Prevention System for virtualized cloud environment

Detection of Malware and Kernel-Level Rootkits in Cloud Computing Environments

Execution Time Measurement of Virtual Machine Volatile Artifacts Analyzers

Integrity Based Intrusion Detection System for Enterprise and Cloud Environments

Detecting Malware and Rootkit via Memory Forensics

Monitoring of malefactor's activity in virtualized honeypots on the base of semantic transformation in Qemu hypervisor

Forensic Virtual Machines: Dynamic Defence in the Cloud via Introspection

Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection

A cooperative botnet profiling and detection in virtualized environment

Virtual machine introspection based spurious process detection in virtualized cloud computing environment