{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T05:44:08Z","timestamp":1791351848311,"version":"4.3.1"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866313","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"38-49","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":198,"title":["HyperSentry"],"prefix":"10.1145","author":[{"given":"Ahmed M.","family":"Azab","sequence":"first","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peng","family":"Ning","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhi","family":"Wang","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xuxian","family":"Jiang","sequence":"additional","affiliation":[{"name":"North Carolina State University, Raleigh, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaolan","family":"Zhang","sequence":"additional","affiliation":[{"name":"IBM T.J. Watson Research Center, Hawthorne, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nathan C.","family":"Skalsky","sequence":"additional","affiliation":[{"name":"IBM Systems & Technology Group, Research Triangle Park, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"http:\/\/www.xen.org\/. Accessed","year":"2010","unstructured":"}}Xen. http:\/\/www.xen.org\/. Accessed in February 2010 . }}Xen. http:\/\/www.xen.org\/. Accessed in February 2010."},{"key":"e_1_3_2_1_2_1","unstructured":"}}Amazon. Amazon elastic compute cloud (ec2). aws.amazon.com\/ec2.  }}Amazon. Amazon elastic compute cloud (ec2). aws.amazon.com\/ec2."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.50"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.29"},{"key":"e_1_3_2_1_5_1","first-page":"305","volume-title":"Proceedings of the 15th USENIX Security Symposium","author":"Berger S.","year":"2006","unstructured":"}} S. Berger , R. Caceres , K. A. Goldman , R. Perez , R. Sailer , and L. van Doorn . vTPM : Virtualizing the trusted platform module . In Proceedings of the 15th USENIX Security Symposium , pages 305 -- 320 , August 2006 . }}S. Berger, R. Caceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn. vTPM: Virtualizing the trusted platform module. In Proceedings of the 15th USENIX Security Symposium, pages 305--320, August 2006."},{"key":"e_1_3_2_1_6_1","volume-title":"March","author":"}}I. Corporation","year":"2009","unstructured":"}}I. Corporation . IBM BladeCenter products and technology , March 2009 . }}I. Corporation. IBM BladeCenter products and technology, March 2009."},{"key":"e_1_3_2_1_7_1","volume-title":"System programming guide","author":"}}I. Corporation","year":"2009","unstructured":"}}I. Corporation . Software developer's manual vol. 3 : System programming guide , June 2009 . }}I. Corporation. Software developer's manual vol. 3: System programming guide, June 2009."},{"key":"e_1_3_2_1_8_1","volume-title":"February","author":"}}I. Corporation","year":"2010","unstructured":"}}I. Corporation . Integrated management module user guide , February 2010 . }}I. Corporation. Integrated management module user guide, February 2010."},{"key":"e_1_3_2_1_9_1","volume-title":"September","author":"Devices A. M.","year":"2007","unstructured":"}} A. M. Devices . Amd64 architecture programmer's manual: Volume 2: System programming , September 2007 . }}A. M. Devices. Amd64 architecture programmer's manual: Volume 2: System programming, September 2007."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653730"},{"key":"e_1_3_2_1_11_1","volume-title":"Proceedings of the 10th CanSecWest conference","author":"Duflot L.","year":"2009","unstructured":"}} L. Duflot . Getting into the SMRAM: SMM reloaded . In Proceedings of the 10th CanSecWest conference , 2009 . }}L. Duflot. Getting into the SMRAM: SMM reloaded. In Proceedings of the 10th CanSecWest conference, 2009."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of the 7th CanSecWest conference","author":"Duflot L.","year":"2006","unstructured":"}} L. Duflot , D. Etiemble , and O. Grumelard . Using CPU system management mode to circumvent operating system security functions . In Proceedings of the 7th CanSecWest conference , 2006 . }}L. Duflot, D. Etiemble, and O. Grumelard. Using CPU system management mode to circumvent operating system security functions. In Proceedings of the 7th CanSecWest conference, 2006."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460892"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945464"},{"key":"e_1_3_2_1_15_1","unstructured":"}}GrammaTech. www.grammatech.com\/products\/codesurfer\/.  }}GrammaTech. www.grammatech.com\/products\/codesurfer\/."},{"key":"e_1_3_2_1_16_1","volume-title":"Accessed in April","year":"2010","unstructured":"}}Intel. Intel active management technology. http:\/\/www.intel.com\/technology\/platform-technology\/intel-amt\/ . Accessed in April , 2010 . }}Intel. Intel active management technology. http:\/\/www.intel.com\/technology\/platform-technology\/intel-amt\/. Accessed in April, 2010."},{"key":"e_1_3_2_1_17_1","unstructured":"}}Intel HP NEC and Dell. IPMI intelligent platform management interface specification second generation v2.0. http:\/\/download.intel.com\/design\/servers\/ipmi\/IPMIv2_0rev1_0.pdf February 2004.  }}Intel HP NEC and Dell. IPMI intelligent platform management interface specification second generation v2.0. http:\/\/download.intel.com\/design\/servers\/ipmi\/IPMIv2_0rev1_0.pdf February 2004."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315260"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270348"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_3_2_1_21_1","first-page":"243","volume-title":"Proceedings of the 17th USENIX Security Symposium","author":"Litty L.","year":"2008","unstructured":"}} L. Litty , H. A. Lagar-Cavilla , and D. Lie . Hypervisor support for identifying covertly executing binaries . In Proceedings of the 17th USENIX Security Symposium , pages 243 -- 258 , 2008 . }}L. Litty, H. A. Lagar-Cavilla, and D. Lie. Hypervisor support for identifying covertly executing binaries. In Proceedings of the 17th USENIX Security Symposium, pages 243--258, 2008."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1352592.1352625"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.24"},{"key":"e_1_3_2_1_24_1","first-page":"13","volume-title":"Proceedings of the 13th USENIX Security Symposium","author":"Petroni N. L.","year":"2004","unstructured":"}} N. L. Petroni , T. Fraser , J. Molina , and W. A. Arbaugh . Copilot - a coprocessor-based kernel runtime integrity monitor . In Proceedings of the 13th USENIX Security Symposium , pages 13 -- 13 , 2004 . }}N. L. Petroni, T. Fraser, J. Molina, and W. A. Arbaugh. Copilot - a coprocessor-based kernel runtime integrity monitor. In Proceedings of the 13th USENIX Security Symposium, pages 13--13, 2004."},{"key":"e_1_3_2_1_25_1","volume-title":"Blackhat","author":"Rutkowska J.","year":"2007","unstructured":"}} J. Rutkowska . Beyond The CPU : Defeating Hardware Based RAM Acquisition Tools . Blackhat , February 2007 . }}J. Rutkowska. Beyond The CPU: Defeating Hardware Based RAM Acquisition Tools. Blackhat, February 2007."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 13th USENIX Security Symposium","author":"Sailer R.","year":"2004","unstructured":"}} R. Sailer , X. Zhang , T. Jaeger , and L. van Doorn . Design and implementation of a TCG-based integrity measurement architecture . In Proceedings of the 13th USENIX Security Symposium , August 2004 . }}R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the 13th USENIX Security Symposium, August 2004."},{"key":"e_1_3_2_1_27_1","unstructured":"}}Secunia. Vulnerability report: Vmware esx server 3.x. http:\/\/secunia.com\/advisories\/product\/10757. Accessed in February 2010.  }}Secunia. Vulnerability report: Vmware esx server 3.x. http:\/\/secunia.com\/advisories\/product\/10757. Accessed in February 2010."},{"key":"e_1_3_2_1_28_1","unstructured":"}}Secunia. Vulnerability report: Xen 3.x. http:\/\/secunia.com\/advisories\/product\/15863. Accessed in February 2010.  }}Secunia. Vulnerability report: Xen 3.x. http:\/\/secunia.com\/advisories\/product\/15863. Accessed in February 2010."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095812"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653720"},{"key":"e_1_3_2_1_31_1","unstructured":"}}Trusted Computing Group. https:\/\/www.trustedcomputinggroup.org\/.  }}Trusted Computing Group. https:\/\/www.trustedcomputinggroup.org\/."},{"key":"e_1_3_2_1_32_1","volume-title":"July","author":"}}Trusted Computing Group","year":"2005","unstructured":"}}Trusted Computing Group . TPM specifications version 1.2. https:\/\/www.trustedcomputinggroup.org\/downloads\/specifications\/tpm\/tpm , July 2005 . }}Trusted Computing Group. TPM specifications version 1.2. https:\/\/www.trustedcomputinggroup.org\/downloads\/specifications\/tpm\/tpm, July 2005."},{"key":"e_1_3_2_1_33_1","unstructured":"}}Tux.Org. http:\/\/www.tux.org\/pub\/tux\/benchmarks\/System\/unixbench\/.  }}Tux.Org. http:\/\/www.tux.org\/pub\/tux\/benchmarks\/System\/unixbench\/."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/1894166.1894178"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.30"},{"key":"e_1_3_2_1_36_1","volume-title":"Black Hat conference","author":"Wojtczuk R.","year":"2008","unstructured":"}} R. Wojtczuk and J. Rutkowska . Xen 0wning trilogy . In Black Hat conference , 2008 . }}R. Wojtczuk and J. Rutkowska. Xen 0wning trilogy. In Black Hat conference, 2008."},{"key":"e_1_3_2_1_37_1","volume-title":"Invisible Things Lab","author":"Wojtczuk R.","year":"2009","unstructured":"}} R. Wojtczuk and J. Rutkowska . Attacking SMM memory via Intel CPU cache poisoning . Invisible Things Lab , 2009 . }}R. Wojtczuk and J. Rutkowska. Attacking SMM memory via Intel CPU cache poisoning. Invisible Things Lab, 2009."},{"key":"e_1_3_2_1_38_1","volume-title":"Hypervisor runtime integrity support. US Patent","author":"Zimmer V.","year":"2009","unstructured":"}} V. Zimmer and Y. Rasheed . Hypervisor runtime integrity support. US Patent 2009 0164770, June 2009 }}V. Zimmer and Y. Rasheed. Hypervisor runtime integrity support. US Patent 20090164770, June 2009"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866313","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866313","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:09:06Z","timestamp":1750248546000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866313"}},"subtitle":["enabling stealthy in-context measurement of hypervisor integrity"],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":38,"alternative-id":["10.1145\/1866307.1866313","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866313","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}