| 一种基于硬件辅助虚拟化的软件行为分析器的设计与实现 |
| |
| 引用本文： | 孙亮,寇晓蕤.一种基于硬件辅助虚拟化的软件行为分析器的设计与实现[J].网络安全技术与应用,2013(7):10-11. |
| |
| 作者姓名： | 孙亮 寇晓蕤 |
| |
| 作者单位： | 中国华艺广播公司 福建350001 |
| |
| 摘 要： | 基于虚拟化技术的软件行为分析是近年来出现的分析软件的方法。文本提出一种基于硬件辅助虚拟化技术的软件行为分析器——HVA。HVA是一个利用了安全虚拟机(SVM)、二级页表(NPT)和虚拟机自省等多种虚拟化技术完成的、专门针对软件行为分析的微型VMM。结果表明,HVA在软件行为分析方面表现良好。
|
| 关 键 词： | 硬件辅助虚拟化 软件行为分析 虚拟机自省 二级页表 外部设备访问保护 |
Design and achievement of software analysis tool based on Hardware-assisted Virtualization Monitor |
| |
| Sun Liang
,
Kou Xiao-rui.Design and achievement of software analysis tool based on Hardware-assisted Virtualization Monitor[J].Net Security Technologies and Application,2013(7):10-11. |
| |
| Authors: | Sun Liang Kou Xiao-rui |
| |
| Affiliation: | Sun Liang Kou Xiao-rui(China Huayi Broadcast Borporation Fujian 350001) |
| |
| Abstract: | Software analysis based on Hardware-assisted Virtualization Monitor has been recently presently.A software analysis system based on Hardware-assisted Virtualization Monitor—HVA is presented.HVA is thin VMM,which only about 6000 lines code,utilizing the SVM,NPT,EAP and virtual machine introspection technologies to achieve,and special for software analysis.The result of experiments shows that HVA is good for virtual machine introspection,behavior monitor and anti-detection,etc. |
| |
| Keywords: | Hardware-assisted Virtualization Monitor software analysis virtual machine introspection NPT EAP |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
