https://github.com/ainfosec/ecr_hypervisor

https://github.com/ainfosec/ecr_hypervisor

hypervisor hypervisor-detection introspection side-channel

Last synced: 4 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/ainfosec/ecr_hypervisor
• Owner: ainfosec
• License: gpl-2.0
• Created: 2018-09-07T16:05:17.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2018-09-10T22:52:33.000Z (almost 8 years ago)
• Last Synced: 2025-04-28T11:27:35.233Z (about 1 year ago)
• Topics: hypervisor, hypervisor-detection, introspection, side-channel
• Language: C
• Size: 63.4 MB
• Stars: 10
• Watchers: 11
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README
  • License: LICENSE
  • Authors: AUTHORS

Awesome Lists containing this project

README

          
Copyright (C) 2018 Assured Information Security, Inc

See our whitepaper here: https://dfrws.org/sites/default/files/session-files/paper_who_watches_the_watcher_detecting_hypervisor_introspection_from_unprivileged_guests.pdf

1. See README.xen_install for detailed guidance on installing the AIS customized version of Xen Project 4.10-unstable. Xen Project has been modified to accept a hypercall that can perform a VMWRITE that will modify the appropriate VMCS's so that the hypervisor performs a VM exit when the instruction is run.

2. See README.xen_vmexit for detailed guidance on toggling and measuring exiting behavior for specific instructions to conduct instruction timing introspection.

3. See README.libvmi for detailed guidance on installing and using libVMI for memory and cache timing introspection.