Hypernel: A Hardware-Assisted Framework for Kernel Protection without Nested Paging

被引：2

作者：

Kwon, Donghyun ^{[1
]}

Oh, Kuenwhee ^{[2
]}

Park, Junmo ^{[1
]}

Yang, Seungyong ^{[2
]}

Cho, Yeongpil ^{[3
]}

Kang, Brent Byunghoon ^{[2
]}

Paek, Yunheung ^{[1
]}

机构：

[1] Seoul Natl Univ, Seoul, South Korea

[2] Korea Adv Inst Sci & Technol, Daejeon, South Korea

[3] Soongsil Univ, Seoul, South Korea

来源：

2018 55TH ACM/ESDA/IEEE DESIGN AUTOMATION CONFERENCE (DAC) | 2018年

基金：

新加坡国家研究基金会;

关键词：

D O I：

10.1145/3195970.3196061

中图分类号：

TP18 [人工智能理论];

学科分类号：

081104 ; 0812 ; 0835 ; 1405 ;

摘要：

Large OS kernels always suffer from attacks due to their numerous inherent vulnerabilities. To protect the kernel, hypervisors have been employed by many security solutions. However, relying on a hypervisor has a detrimental impact on the system performance due mainly to nested paging. In this paper, we present Hypernel, a security framework combining hardware and software components to address this problem. Hypersec, the software component, provides an isolated execution environment for security solutions, and the hardware monitor component enables a word-granularity monitoring capability on the kernel memory. Our evaluation shows that Hypernel efficiently fulfills the role of a security framework, while imposing mere 3.1% of runtime overhead on the system.

引用

页数：6