Rafal Wojtczuk and Joanna Rutkowska - Black Hat
Rafal Wojtczuk and Joanna Rutkowska - Black Hat
Rafal Wojtczuk and Joanna Rutkowska - Black Hat
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Introducing “Ring -2”<br />
SMM can access the whole system memory (including the<br />
kernel <strong>and</strong> hypervisor memory!!!)<br />
SMM Interrupt, SMI, can preempt the hypervisor (at least<br />
on Intel VT-x)<br />
SMM can access the I/O devices (IN/OUT, MMIO)