iCruiser: Protecting Kernel Link-Based Data Structures with Secure Canary

Li, Wang; Wu, Dinghao; Liu, Peng

doi:10.1109/qrs-c.2016.9

Search citation statements

Order By: Relevance

Paper Sections

Select...

Related Work1

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2022

Publication Types

Select...

Article1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

(1 citation statement)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Wang, Wu, and Liu proposed iCruiser [34] to protect link-based data structures of the kernel. iCruiser uses a special canary embedded in the linked objects to verify the integrity of the links.…”

Section: Related Workmentioning

confidence: 99%

H-KPP: Hypervisor-Assisted Kernel Patch Protection

Kiperberg

Zaidenberg

2022

Applied Sciences

View full text Add to dashboard Cite

We present H-KPP, hypervisor-based protection for kernel code and data structures. H-KPP prevents the execution of unauthorized code in kernel mode. In addition, H-KPP protects certain object fields from malicious modifications. H-KPP can protect modern kernels equipped with BPF facilities and loadable kernel modules. H-KPP does not require modifying or recompiling the kernel. Unlike many other systems, H-KPP is based on a thin hypervisor and includes a novel SLAT switching mechanism, which allows H-KPP to achieve very low (≈6%) performance overhead compared to baseline Linux.

show abstract

Section: Related Workmentioning

confidence: 99%