[1] Obasuyi, G. C., & Sari, A. (2015). Security challenges of virtualization hypervisors in virtualized hardware environment. International Journal of Communications,
Network and System Sciences, 8(07), 260.
[2] https://www.cvedetails.com/vulnerability-list/vendor_id-6276/opec-1/XEN.html
[3] Duflot, L., Etiemble, D., & Grumelard, O. (2006). Using CPU system management mode to circumvent operating system security functions. CanSecWest/core06.
[4] Intel 64 and IA-32 Architectures Software Developer’s Manual, September 2016. [5] Ormandy T: An empirical study into the Security exposure to hosts of hostile
virtualized environments. In CanSecWest applied Security conference. Vancouver; 2007. http://taviso.decsystem.org/virtsec.pdf.
[6] Le, C. H. H. (2009). Protecting xen hypercalls (Doctoral dissertation, UNIVERSITY OF BRITISH COLUMBIA (Vancouver).
[7] Jin, S., Seol, J., Huh, J., & Maeng, S. (2015, March). Hardware-Assisted Secure Resource Accounting under a Vulnerable Hypervisor. In ACM SIGPLAN Notices (Vol. 50, No. 7, pp. 201-213). ACM.
[8] Delgado, B., & Karavanic, K. L. (2013, September). Performance implications of system management mode. In Workload Characterization (IISWC), 2013 IEEE
International Symposium on (pp. 163-173). IEEE.
[9] http://venom.crowdstrike.com/
[10] Xen Security Advisories (XSA): https://xenbits.xen.org/xsa/
[11] Azab, A. M., Ning, P., Wang, Z., Jiang, X., Zhang, X., & Skalsky, N. C. (2010, October). HyperSentry: enabling stealthy in-context measurement of hypervisor integrity. In Proceedings of the 17th ACM conference on Computer and communications security (pp. 38-49). ACM.
[12] Wang, J., Stavrou, A., & Ghosh, A. (2010, September). Hypercheck: A hardware- assisted integrity monitor. In International Workshop on Recent Advances in Intrusion Detection (pp. 158-177). Springer Berlin Heidelberg.
[13] Rutkowska, J., & Wojtczuk, R. (2008). Preventing and detecting Xen hypervisor subversions. Blackhat Briefings USA.
[14] F. Zhang, K. Leach, K. Sun, and A. Stavrou, "SPECTRE: A dependable Introspection Framework via System Management Mode," DSN, Budapest, Hungary, 2013.
[15] SMI Transfer Monitor (STM) User Guide, August 2015, Revision 1.00 [16] https://minnowboard.org/
[17] https://krebsonsecurity.com/tag/mirai-botnet/
[18] https://en.wikipedia.org/wiki/WannaCry_ransomware_attack
[19] http://www.wired.co.uk/article/judy-malware-android [20] https://github.com/chipsec/chipsec/wiki/1.2.4
69
[21] Delgado, B., & Karavanic, K. L. (2018, May). EPA-RIMM: A Framework for Dynamic SMM-based Runtime Integrity Measurement, Technical Report,
arXiv:1805.03755 [cs.CR], available at: http://arxiv.org/abs/1805.03755.
[22] Wang, Z., & Jiang, X. (2010, May). Hypersafe: A lightweight approach to provide lifetime hypervisor control-flow integrity. In Security and Privacy (SP), 2010 IEEE Symposium on (pp. 380-395). IEEE.
[23] Deng, L., Liu, P., Xu, J., Chen, P., & Zeng, Q. (2017, April). Dancing with Wolves: Towards Practical Event-driven VMM Monitoring. In Proceedings of the 13th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (pp. 83-96). ACM
[24] Zhang, F., Chen, J., Chen, H., & Zang, B. (2011, October). CloudVisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (pp. 203-216). ACM.
[25] Szefer, J., & Lee, R. B. (2012, March). Architectural support for hypervisor-secure virtualization. In ACM SIGPLAN Notices (Vol. 47, No. 4, pp. 437-450). ACM. [26] MODEL, I. T. A Multi-Layered Architecture for a Secure Virtualization
Environment.
[27] http://www.tianocore.org/
[28] https://firmware.intel.com/projects/minnowboard-max
[29] https://wiki.xenproject.org/wiki/Xen_Project_Software_Overview [30] STM Source Code: https://github.com/jyao1/STM
[31] Xen Memory corruption, Information leak Vulnerabilities:
https://www.debian.org/security/2017/dsa-4050
[32] IDT-hook attack: http://phrack.org/issues/59/4.html,
http://www.phrack.org/issues/69/15.html, https://www.nccgroup.trust/uk/about- us/newsroom-and-events/blogs/2015/february/adventures-in-xen-exploitation/
[33] Thongthua, A., & Ngamsuriyaroj, S. (2016, May). Assessment of Hypervisor Vulnerabilities. In Cloud Computing Research and Innovations (ICCCRI), 2016 International Conference on (pp. 71-77). IEEE.
[34] Ibrahim, A. S., Hamlyn-Harris, J., & Grundy, J. (2016). Emerging security challenges of cloud virtual infrastructure. arXiv preprint arXiv:1612.09059.
[35] Xen Project 4.9 release: https://www.linuxfoundation.org/press-release/new- features-in-xen-project-4-9-provide-better-usability-in-automotive-and-embedded/
[36] De Souza, W. A. R., & Tomlinson, A. (2015, November). SMM-based hypervisor integrity measurement. In Cyber Security and Cloud Computing (CSCloud), 2015 IEEE 2nd International Conference on (pp. 362-367). IEEE.
[37] Bonkoski, A., Bielawski, R., & Halderman, J. A. (2013, August). Illuminating the Security Issues Surrounding Lights-Out Server Management. In WOOT.
70
[38] Petroni Jr, N. L., Fraser, T., Molina, J., & Arbaugh, W. A. (2004, August). Copilot-a Coprocessor-based Kernel Runtime Integrity Monitor. In USENIX Security Symposium (pp. 179-194).
[39] Greene, J. (2010). Intel Trusted Execution Technology: Hardware-based Technology for Enhancing Server Platform Security. Intel Corporation, Copyright, 2012(8). [40] https://www.apriorit.com/qa-blog/223-virtualization-in-testing [41] http://www.datacenterknowledge.com/archives/2015/10/05/hpc-virtualization-use- cases-best-practices [42] https://www.automationworld.com/virtualization-it-ot-crossroads [43] http://www.datacenterknowledge.com/google-alphabet/google-cloud-platform- introduces-96-cpu-machines
[44] Heiser, G. (2009, January). Hypervisors for consumer electronics. In Consumer Communications and Networking Conference, 2009. CCNC 2009. 6th IEEE (pp. 1- 5). IEEE.
[45] Godfrey, M. W., & German, D. M. (2008, September). The past, present, and future of software evolution. In Frontiers of Software Maintenance, 2008. FoSM 2008. (pp. 129-138). IEEE.
[46] https://www.darwins-theory-of-evolution.com/
[47] Steinberg, U., & Kauer, B. (2010, April). NOVA: a microhypervisor-based secure virtualization architecture. In Proceedings of the 5th European conference on Computer systems (pp. 209-222). ACM.
[48] Intel Chips timeline: https://www.intel.com/content/www/us/en/history/history-intel- chips-timeline-poster.html, 2012.
[49] http://www.tomshardware.com/picturestory/784-intel-chipset-history.html#s27
[50] Myers, E.D., (2017 August). STM/PE and XHIM. Poster presented at the USENIX Security Symposium, Vancouver, BC.
[51] Pendergrass, J. A., & McGill, K. N. (2013). LKIM: The Linux Kernel Integrity Measurer. Johns Hopkins APL technical digest, 32(2), 509-516.
[52] Azab, A. M., Ning, P., & Zhang, X. (2011, October). Sice: a hardware-level strongly isolated computing environment for x86 multi-core platforms. In Proceedings of the 18th ACM conference on Computer and communications security (pp. 375-388). ACM.
[53] Zhang, F., & Zhang, H. (2016, June). SoK: A Study of Using Hardware-assisted Isolated Execution Environments for Security. In Proceedings of the Hardware and Architectural Support for Security and Privacy 2016 (p. 3). ACM.
[54] Anderson, R. J. (2010). Security engineering: a guide to building dependable
distributed systems. John Wiley & Sons.
[55] Garfinkel, T., & Rosenblum, M. (2003, February). A Virtual Machine Introspection Based Architecture for Intrusion Detection. In Ndss (Vol. 3, No. 2003, pp. 191-206).
71
[56] Jiang, X., Wang, X., & Xu, D. (2007, October). Stealthy malware detection through vmm-based out-of-the-box semantic view reconstruction. In Proceedings of the 14th ACM conference on Computer and communications security (pp. 128-138). ACM.
[57] Tang, H., Feng, S., Zhao, X., & Jin, Y. (2017). VirtAV: an Agentless Runtime Antivirus System for Virtual Machines. KSII Transactions on Internet & Information Systems, 11(11).
[58] http://www.hsc.fr/ressources/outils/rkscan/ [59] http://seclists.org/incidents/2000/Oct/165
[60] Lawless, T. St Michael: detection of kernel level rootkits: https://github.com/tomasz- janiczek/stmichael-lkm
[61] Huangang, X. (2002). Building a secure system with LIDS. Linux Intrusion Detection System.: http://www.de.lids.org/document/build_lids-0.2.html
[62] Chevalier, R., Villatel, M., Plaquin, D., & Hiet, G. (2017, December). Co-processor- based Behavior Monitoring: Application to the Detection of Attacks Against the System Management Mode. In Proceedings of the 33rd Annual Computer Security Applications Conference (pp. 399-411). ACM.
[63] Zhang, F., Leach, K., Stavrou, A., Wang, H., & Sun, K. (2015, May). Using hardware features for increased debugging transparency. In Security and Privacy
(SP), 2015 IEEE Symposium on (pp. 55-69). IEEE.
[64] Zhang, F., Leach, K., Wang, H., & Stavrou, A. (2015, April). Trustlogin: Securing password-login on commodity operating systems. In Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security (pp. 333-344). ACM.
[65] Unified Extensible Firmware Interface System Management Mode Initialization Protections with System Management Interrupt Transfer Monitor Sandboxing. :
https://patents.google.com/patent/US20170132164
[66] Zhenyu Ning, Fengwei Zhang, Weisong Shi, and Weidong Shi. 2017. Position Paper: Challenges Towards Securing Hardware-assisted Execution Environments. In Proceedings of the Hardware and Architectural Support for Security and
Privacy (HASP '17). ACM, New York, NY, USA, Article 6, 8 pages.
[67] https://software.intel.com/en-us/articles/power-management-states-p-states-c-states- and-package-c-states
[68] Schöne, R., Molka, D., & Werner, M. (2015). Wake-up latencies for processor idle
states on current x86 processors. Computer Science-Research and
Development, 30(2), 219-227.
[69] Schatz, D., Bashroush, R., & Wall, J. (2017). Towards a More Representative Definition of Cyber Security. Journal of Digital Forensics, Security and Law, 12(2), 8.
[70] Chisnall, D. (2008). The definitive guide to the xen hypervisor. Pearson Education. [71] Intel Trusted Execution Technology (Intel TXT) Software Development Guide,
72
[72] https://invisiblethingslab.com/resources/misc09/smm_cache_fun.pdf
[73] Wojtczuk, R., & Rutkowska, J. (2009). Attacking intel trusted execution technology. Black Hat DC, 2009.
[74] Loucaides, J. “BIOS and Secure Boot Attacks Uncovered”, Ruxcon 2014, Melbourne, Australia, https://ruxcon.org.au/assets/2014/slides/rux- BiosAttackSummary-ruxcon2014.pdf .
[75] Kallenberg, C., Kovah, Xeno. “How Many Million BIOSes Would you Like to Infect?”, CanSecWest 2015, Vancouver, Canada, 2015.
[76] http://www.kb.cert.org/vuls/id/912156
[77] “Lenovo ThinkPad System Management Mode arbitrary code execution exploit”, Cr4sh, https://github.com/Cr4sh/ThinkPwn.
[78] Xen Code Review Dashboard: xen.biterg.io
[79] AMD, AMD64 Architecture Programmer’s Manual, Volume 2: System Programming.
[80] J. Triplett and B. Triplett, “BITS: BIOS Implementation Test Suite,”http://www.linuxplumbersconf.org/2011/ocw/system/presentations/867/origina l/bits.pdf