Matches in SemOpenAlex for { <https://semopenalex.org/work/W4327774298> ?p ?o ?g. }
Showing items 1 to 86 of
86
with 100 items per page.
- W4327774298 abstract "Virtual machine monitors (VMMs) are used to monitor the behavior of virtual machine (VM) programs. System call detection is frequently used to monitor behavior. To monitor the system calls, the VMM inserts a breakpoint, called a hook point, into the memory of the monitored VM. Researchers have determined hook points based on experimental knowledge or reading the source code of operating systems (OSes). However, reading the source codes of OS requires specialized knowledge. In addition, the appropriate hook point differs among OS versions. Therefore, analyzing the source code in each OS update is impractical. We propose a method for estimating the hook point using a memory analysis technique. The proposed method acquires the memory of the monitored VM and then searches for an appropriate instruction appropriate to hook. The search instructions depend on the processor architecture. Therefore, the proposed method does not require knowledge of OS versions or reading the source code of OSes. The experimental results showed that the proposed method precisely estimates the hook point. In addition, the overhead of the proposed method is small, considering the boot time of the monitored VM." @default.
- W4327774298 created "2023-03-19" @default.
- W4327774298 creator A5004953139 @default.
- W4327774298 creator A5035774089 @default.
- W4327774298 creator A5036788403 @default.
- W4327774298 creator A5037619825 @default.
- W4327774298 date "2022-11-01" @default.
- W4327774298 modified "2023-10-16" @default.
- W4327774298 title "Hook Point Estimation for System Call Detection by Virtual Machine Monitor" @default.
- W4327774298 cites W17417926 @default.
- W4327774298 cites W2091618476 @default.
- W4327774298 cites W2140807364 @default.
- W4327774298 cites W2168760272 @default.
- W4327774298 cites W2972552958 @default.
- W4327774298 cites W3019631707 @default.
- W4327774298 cites W3149949704 @default.
- W4327774298 cites W3196101218 @default.
- W4327774298 doi "https://doi.org/10.1109/candarw57323.2022.00069" @default.
- W4327774298 hasPublicationYear "2022" @default.
- W4327774298 type Work @default.
- W4327774298 citedByCount "0" @default.
- W4327774298 crossrefType "proceedings-article" @default.
- W4327774298 hasAuthorship W4327774298A5004953139 @default.
- W4327774298 hasAuthorship W4327774298A5035774089 @default.
- W4327774298 hasAuthorship W4327774298A5036788403 @default.
- W4327774298 hasAuthorship W4327774298A5037619825 @default.
- W4327774298 hasConcept C111919701 @default.
- W4327774298 hasConcept C127413603 @default.
- W4327774298 hasConcept C136085584 @default.
- W4327774298 hasConcept C149635348 @default.
- W4327774298 hasConcept C176649486 @default.
- W4327774298 hasConcept C177264268 @default.
- W4327774298 hasConcept C17744445 @default.
- W4327774298 hasConcept C199360897 @default.
- W4327774298 hasConcept C199539241 @default.
- W4327774298 hasConcept C2524010 @default.
- W4327774298 hasConcept C25344961 @default.
- W4327774298 hasConcept C2776760102 @default.
- W4327774298 hasConcept C2777586403 @default.
- W4327774298 hasConcept C2778579508 @default.
- W4327774298 hasConcept C2779960059 @default.
- W4327774298 hasConcept C28719098 @default.
- W4327774298 hasConcept C33923547 @default.
- W4327774298 hasConcept C41008148 @default.
- W4327774298 hasConcept C43126263 @default.
- W4327774298 hasConcept C554936623 @default.
- W4327774298 hasConcept C66938386 @default.
- W4327774298 hasConcept C76399640 @default.
- W4327774298 hasConceptScore W4327774298C111919701 @default.
- W4327774298 hasConceptScore W4327774298C127413603 @default.
- W4327774298 hasConceptScore W4327774298C136085584 @default.
- W4327774298 hasConceptScore W4327774298C149635348 @default.
- W4327774298 hasConceptScore W4327774298C176649486 @default.
- W4327774298 hasConceptScore W4327774298C177264268 @default.
- W4327774298 hasConceptScore W4327774298C17744445 @default.
- W4327774298 hasConceptScore W4327774298C199360897 @default.
- W4327774298 hasConceptScore W4327774298C199539241 @default.
- W4327774298 hasConceptScore W4327774298C2524010 @default.
- W4327774298 hasConceptScore W4327774298C25344961 @default.
- W4327774298 hasConceptScore W4327774298C2776760102 @default.
- W4327774298 hasConceptScore W4327774298C2777586403 @default.
- W4327774298 hasConceptScore W4327774298C2778579508 @default.
- W4327774298 hasConceptScore W4327774298C2779960059 @default.
- W4327774298 hasConceptScore W4327774298C28719098 @default.
- W4327774298 hasConceptScore W4327774298C33923547 @default.
- W4327774298 hasConceptScore W4327774298C41008148 @default.
- W4327774298 hasConceptScore W4327774298C43126263 @default.
- W4327774298 hasConceptScore W4327774298C554936623 @default.
- W4327774298 hasConceptScore W4327774298C66938386 @default.
- W4327774298 hasConceptScore W4327774298C76399640 @default.
- W4327774298 hasLocation W43277742981 @default.
- W4327774298 hasOpenAccess W4327774298 @default.
- W4327774298 hasPrimaryLocation W43277742981 @default.
- W4327774298 hasRelatedWork W1968105297 @default.
- W4327774298 hasRelatedWork W199500277 @default.
- W4327774298 hasRelatedWork W2112715807 @default.
- W4327774298 hasRelatedWork W2114488210 @default.
- W4327774298 hasRelatedWork W2141458042 @default.
- W4327774298 hasRelatedWork W2360884399 @default.
- W4327774298 hasRelatedWork W2913708805 @default.
- W4327774298 hasRelatedWork W2963805652 @default.
- W4327774298 hasRelatedWork W4240072561 @default.
- W4327774298 hasRelatedWork W4327774298 @default.
- W4327774298 isParatext "false" @default.
- W4327774298 isRetracted "false" @default.
- W4327774298 workType "article" @default.