jetlib.sec » Tags » virtualization

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

30 items tagged "virtualization"

Related tags: security [+], technology authors [+], hypervisor [+], intel [+], rootkits [+], privilege escalation vulnerability [+], paper [+], multiple [+], local privilege escalation [+], virtual security [+], steve pate [+], security event [+], secubt [+], mathias payer [+], dynamic binary translation [+], code [+], chaos communication congress [+], binary translator [+], audio [+], yuriy bulygin [+], virtual machine [+], video [+], slides [+], malware [+], ips [+], insane [+], horsemen [+], hat europe [+], four horsemen [+], europe [+], bing tags [+], asia [+], Software [+], ARM [+], windows [+], virtualisation [+], virtual machines [+], virtual guests [+], virtual [+], server virtualization [+], server [+], security state [+], security auditors [+], security advisory [+], secunia [+], scale performance [+], relative power [+], rare occasions [+], preview [+], platform preview [+], platform [+], penetration testers [+], penetration test [+], penetration [+], paper software [+], moore [+], dino dai zovi [+], david jorm [+], creating [+], cortex [+], claudio criscione [+], breakpoint [+], brandon baker [+], amit klein [+], amit [+], advisory [+], Hardware [+], 3 things [+], usa [+], black hat [+]

• February 24, 2012
• 0:00

  Vuln: Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

  Tags:  multiple intel virtualization privilege-escalation-vulnerability local-privilege-escalation  

• February 18, 2012
• 19:51

  Mobile Virtualization

   » ‎ Wirevolution

  According to Electronista, ARM’s next generation of chips for phones and tablets should start shipping in devices at the end of this year.

  These chips are based on ARM’s big.LITTLE architecture. big.LITTLE chips aren’t just multi-core, they contain cores that are two different implementations of the same instruction set: a Cortex A7 and one or more Cortex A15s. The Cortex A7 has an identical instruction set to the A15, but is slower and more power efficient – ARM says it is the most power-efficient processor it has ever developed. The idea is that phones will get great battery life by mainly running on the slow, power-efficient Cortex A7, and great performance by using the A15 on the hopefully rare occasions when they need its muscle. Rare in this context is relative. Power management on modern phones involves powering up and powering down subsystems in microseconds, so a ‘rarely’ used core could still be activated several times in a single second.

  The Cortex A15 and the Cortex A7 are innovative in another way, too: they are the first cores based on the ARMv7-A architecture. This is ARM’s first architecture with hardware support for virtualization.

  Even without hardware support, virtualization on handsets has been around for a while; phone OEMs use it to make cheaper smartphones by running Android on the same CPU that runs the cellular baseband stack. ARM says:

  Virtualization in the mobile and embedded space can enable hardware to run with less memory and fewer chips, reducing BOM costs and further increasing energy efficiency.

  This application, running Android on the same core as the baseband, does not seem to have taken the market by storm. I presume because of performance. Even the advent of hardware support for virtualization may not rescue this application, since mobile chip manufacturers now scale performance by adding cores, and Moore’s law is rendering multicore chips cheap enough to put into mass-market smartphones.

  So what about other applications? The ARM piece quoted above goes on to say:

  Virtualization also helps to address safety and security challenges, and reduces software development and porting costs by man years.

  In 2010 Red Bend Software, a company that specializes in manageability software for mobile phones, bought VirtualLogix, one of the three leading providers of virtualization software for phones (the other two are Trango, bought by VMWare in 2008 and OK Labs.)

  In view of Red Bend’s market, it looks as if they acquired VirtualLogix primarily to enable enterprise IT departments to securely manage their employees’ phones. BYOD (Bring Your Own Device) is a nightmare for IT departments; historically they have kept chaos at bay by supporting only a limited number of devices and software setups. But in the era of BYOD employees demand to use a vast and ever-changing variety of devices. Virtualization enables Red Bend to add a standard corporate software load to any phone.

  This way, a single phone has a split personality, and the hardware virtualization support keeps the two personalities securely insulated from each other. On the consumer side, the user downloads apps, browses websites and generally engages in risky behavior. But none of this impacts the enterprise side of the phone, which remains secure.

  Tags:  ARM virtualization cortex moore scale-performance relative-power rare-occasions ARM  

• January 22, 2012
• 21:45

  [Paper] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization IDS
  Event: Black Hat Asia 2008
  

  Tags:  hypervisor virtualization paper asia technology-authors black-hat  

• 21:45

  [Slides] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization IDS
  Event: Black Hat Asia 2008
  

  Tags:  hypervisor ips virtualization asia technology-authors black-hat  

• January 10, 2012
• 0:00

  Vuln: Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

  Tags:  multiple intel virtualization privilege-escalation-vulnerability local-privilege-escalation  

• January 03, 2012
• 10:59

  [Slides] Hardware Virtualization Based Rootkits

   » ‎ SecDocs
  Authors: Dino Dai Zovi
  Tags: rootkit
  Event: Black Hat USA 2006
  

  Tags:  Hardware virtualization rootkits dino-dai-zovi usa black-hat slides  

• September 07, 2011
• 10:43

  [Slides] Virtually Pwned: Pentesting Virtualization

   » ‎ SecDocs
  Authors: Claudio Criscione
  Tags: virtualization virtual machine Metasploit exploiting
  Event: Black Hat USA 2010
  Abstract: Virtualization systems are nowadays ubiquitus in enterprises of any size. Penetration testers and security auditors, however, often overlook virtualization infrastructures, simply looking at the virtual machines without any direct analysis of the underlying solution, not to mention those analyses simply marking virtual environments as "not-compliant". A different, new approach is required to assess such systems, defining new targets and new ways to get there. This talk will outline procedures and approaches, complete with tools and demos, to execute a penetration test or a design review on virtualization enviroments. Security experts eager to know more about these systems and sysops willing to protect their own fortress will find this talk interesting

  Tags:  security penetration virtualization claudio-criscione usa penetration-testers penetration-test security-auditors  

• 0:00

  Vuln: Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

  Tags:  multiple intel virtualization privilege-escalation-vulnerability local-privilege-escalation  

• August 25, 2011
• 0:00

  Vuln: Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Multiple Virtualization Applications Intel VT-d chipsets Local Privilege Escalation Vulnerability

  Tags:  multiple intel virtualization privilege-escalation-vulnerability local-privilege-escalation  

• July 02, 2011
• 1:31

  [Paper] Software Virtualization Based Rootkits

   » ‎ SecDocs
  Authors: Sun Bing
  Tags: virtualization rootkit
  Event: Black Hat Europe 2007
  

  Tags:  virtualization Software paper bing-tags europe hat-europe paper-software black-hat  

• 1:30

  [Slides] Software Virtualization Based Rootkits

   » ‎ SecDocs
  Authors: Sun Bing
  Tags: virtualization rootkit
  Event: Black Hat Europe 2007
  

  Tags:  virtualization rootkits Software bing-tags europe hat-europe black-hat slides  

• May 19, 2011
• 0:22

  Secunia Security Advisory 44604

   » ‎ Packet Storm Security Advisories
  Secunia Security Advisory - A vulnerability has been reported in the IBM Virtualization Manager for IBM Director, which can be exploited by malicious people to compromise a vulnerable system.

  Tags:  advisory secunia security security-advisory virtualization  

• April 19, 2011
• 13:22

  [Slides] Windows Server Virtualization & The Windows Hypervisor

   » ‎ SecDocs
  Authors: Brandon Baker
  Tags: virtualization virtual machine Windows
  Event: Black Hat USA 2007
  

  Tags:  server virtualization windows brandon-baker usa server-virtualization black-hat  

• December 30, 2010
• 21:25

  [Slides] Virtualization Security State of the Union

   » ‎ SecDocs
  Authors: David Jorm
  Tags: virtualization virtual machine
  Event: Ruxcon 2010
  Abstract: Virtualisation and cloud computing technologies provide a unique set of security problems. Where one host runs multiple virtual guests, a new inter-guest attack surface is exposed. Several recent vulnerabilities have taken advantage of this, allowing for inter-guest attacks. This talk describes the key categories of virtualisation related vulnerabilities, narrated by a time line of critical CVEs. Defence attempts are also discussed, with emphasis on SELinux and the efforts of the sVirt project.

  Tags:  virtualization virtualisation security david-jorm virtual-guests security-state  

• December 02, 2010
• 12:00

  Bugtraq: New paper by Amit Klein (Trusteer): "Detecting virtualization over the web with IE9 (platform preview) and Semi-permanent computer fingerprinting and user tracking in IE9 (platform preview)"

   » ‎ SecurityFocus Vulnerabilities
  New paper by Amit Klein (Trusteer): "Detecting virtualization over the web with IE9 (platform preview) and Semi-permanent computer fingerprinting and user tracking in IE9 (platform preview)"

  Tags:  paper preview platform amit-klein platform-preview virtualization amit  

• November 06, 2010
• 12:29

  [Slides] Creating Secure VM - Compararison between Intel and AMD, and one more thing...

   » ‎ SecDocs
  Authors: Tsukasa Ooi
  Tags: virtualization virtual machine
  Event: AVTokyo 2009
  Abstract: This session will talk about 3 things: 1 - Algorithms to make virtual machines having security-enhanced features such as invisible instruction breakpoint and hooks of system I/Os. 2 - Differences between Intel VT-x and AMD-V and influences that these differences brings security-enhanced virtual machines. 3 - New method for virtualization of x86 architecture.

  Tags:  intel virtualization creating virtual-machines 3-things breakpoint  

• July 24, 2010
• 21:09

  [Video] Playing by Virtual Security Rules: How Virtualization Changes Everything and What to Do About It

   » ‎ SecDocs
  Authors: Steve Pate
  Tags: virtualization virtual machine security
  Event: Black Hat USA 2008
  

  Tags:  video virtualization security steve-pate usa virtual-security security-event  

• 21:09

  [Slides] Playing by Virtual Security Rules: How Virtualization Changes Everything and What to Do About It

   » ‎ SecDocs
  Authors: Steve Pate
  Tags: virtualization virtual machine security
  Event: Black Hat USA 2008
  

  Tags:  virtualization virtual security steve-pate usa virtual-security security-event  

• 21:09

  [Audio] Playing by Virtual Security Rules: How Virtualization Changes Everything and What to Do About It

   » ‎ SecDocs
  Authors: Steve Pate
  Tags: virtualization virtual machine security
  Event: Black Hat USA 2008
  

  Tags:  audio virtualization security steve-pate usa virtual-security security-event  

• July 22, 2010
• 7:41

  [Audio] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization hypervisor IDS
  Event: Black Hat USA 2008
  

  Tags:  audio hypervisor virtualization usa technology-authors black-hat  

• 7:41

  [Paper] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization hypervisor IDS
  Event: Black Hat USA 2008
  

  Tags:  hypervisor virtualization paper usa technology-authors black-hat  

• 7:41

  [Slides] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization hypervisor IDS
  Event: Black Hat USA 2008
  

  Tags:  hypervisor ips virtualization usa technology-authors black-hat  

• 7:41

  [Video] A Hypervisor IPS based on Hardware Assisted Virtualization Technology

   » ‎ SecDocs
  Authors: Junichi Murakami
  Tags: virtualization hypervisor IDS
  Event: Black Hat USA 2008
  

  Tags:  video hypervisor virtualization usa technology-authors black-hat  

• July 07, 2010
• 21:06

  [Audio] The Four Horsemen of the Virtualization Security Apocalypse

   » ‎ SecDocs
  Authors: Christofer Hoff
  Tags: virtualization virtual machine
  Event: Black Hat USA 2008
  

  Tags:  horsemen audio virtualization usa four-horsemen black-hat virtual-machine  

• July 06, 2010
• 1:50

  [Slides] The Four Horsemen of the Virtualization Security Apocalypse

   » ‎ SecDocs
  Authors: Christofer Hoff
  Tags: virtualization virtual machine
  Event: Black Hat USA 2008
  

  Tags:  horsemen virtualization security usa four-horsemen black-hat virtual-machine  

• June 29, 2010
• 0:45

  [Audio] Insane Detection of Insane Rootkits: Chipset Based Approach to Detect Virtualization Malware

   » ‎ SecDocs
  Authors: Yuriy Bulygin
  Tags: virtualization malware malware analysis rootkit
  Event: Black Hat USA 2008
  

  Tags:  insane malware virtualization yuriy-bulygin usa rootkits black-hat  

• 0:45

  [Video] Insane Detection of Insane Rootkits: Chipset Based Approach to Detect Virtualization Malware

   » ‎ SecDocs
  Authors: Yuriy Bulygin
  Tags: virtualization malware malware analysis rootkit
  Event: Black Hat USA 2008
  

  Tags:  insane malware virtualization yuriy-bulygin usa rootkits black-hat  

• February 09, 2010
• 21:12

  [Video] secuBT

   » ‎ SecDocs
  Authors: Mathias Payer
  Tags: virtualization security debugging malware analysis
  Event: Chaos Communication Congress 26th (26C3) 2009
  Abstract: In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. secuBT implements user-space virtualization using dynamic binary translation and adds a system call interposition framework to limit and guard the interoperability of binary code with the kernel. Fast binary translation is a key component to user-space virtualization. secuBT uses and extends fastBT, a generator for low-overhead, table-based dynamic (just-in-time) binary translators. We discuss the most challenging sources of overhead and propose optimizations to further reduce these penalties. We argue for hardening techniques to ensure that the translated program can not escape out of the user-space virtualization. An important feature of secuBT is that only translated code is executed. This ensures code validity and makes it possible to rewrite individual instructions. The system call interposition framework validates every system call and offers the choice to (i) allow it, (ii) abort the program, (iii) redirect to an user-space emulation.

  Tags:  code secubt virtualization mathias-payer dynamic-binary-translation chaos-communication-congress binary-translator  

• 21:12

  [Slides] secuBT

   » ‎ SecDocs
  Authors: Mathias Payer
  Tags: virtualization security debugging malware analysis
  Event: Chaos Communication Congress 26th (26C3) 2009
  Abstract: In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. secuBT implements user-space virtualization using dynamic binary translation and adds a system call interposition framework to limit and guard the interoperability of binary code with the kernel. Fast binary translation is a key component to user-space virtualization. secuBT uses and extends fastBT, a generator for low-overhead, table-based dynamic (just-in-time) binary translators. We discuss the most challenging sources of overhead and propose optimizations to further reduce these penalties. We argue for hardening techniques to ensure that the translated program can not escape out of the user-space virtualization. An important feature of secuBT is that only translated code is executed. This ensures code validity and makes it possible to rewrite individual instructions. The system call interposition framework validates every system call and offers the choice to (i) allow it, (ii) abort the program, (iii) redirect to an user-space emulation.

  Tags:  code secubt virtualization mathias-payer dynamic-binary-translation chaos-communication-congress binary-translator  

• 21:12

  [Paper] secuBT

   » ‎ SecDocs
  Authors: Mathias Payer
  Tags: virtualization security debugging malware analysis
  Event: Chaos Communication Congress 26th (26C3) 2009
  Abstract: In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. In the age of coordinated malware distribution and zero-day exploits security becomes ever more important. This paper presents secuBT, a safe execution framework for the execution of untrusted binary code based on the fastBT dynamic binary translator. secuBT implements user-space virtualization using dynamic binary translation and adds a system call interposition framework to limit and guard the interoperability of binary code with the kernel. Fast binary translation is a key component to user-space virtualization. secuBT uses and extends fastBT, a generator for low-overhead, table-based dynamic (just-in-time) binary translators. We discuss the most challenging sources of overhead and propose optimizations to further reduce these penalties. We argue for hardening techniques to ensure that the translated program can not escape out of the user-space virtualization. An important feature of secuBT is that only translated code is executed. This ensures code validity and makes it possible to rewrite individual instructions. The system call interposition framework validates every system call and offers the choice to (i) allow it, (ii) abort the program, (iii) redirect to an user-space emulation.

  Tags:  code secubt virtualization mathias-payer dynamic-binary-translation chaos-communication-congress binary-translator