02.11.2014 Views

slides

slides

slides

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Application: Detect<br />

Virtualization<br />

●<br />

●<br />

●<br />

In virtualization, a guest kernel will look different than the host<br />

kernel, allowing us to easily locate and separate all processes<br />

Processes for both host & guest can be analyzed simultaneously<br />

This could potentially be used to detect hypervisor rootkits

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!