As computer technologies become increasingly ubiquitous, so must supporting digital
forensics tools and techniques for efficiently and effectively analyzing associated systems' …

Cloud computing is expected to become a common solution for deploying applications
thanks to its capacity to leverage developers from infrastructure management tasks, thus …

It is generally believed to be a tedious, time consuming, and error-prone process to develop
a virtual machine introspection (VMI) tool manually because of the semantic gap. Recent …

An intrusion detection system collects architectural level events from a Virtual Machine
Monitor where the collected events represent operation of a corresponding Virtual Machine …

Virtualization Software deployments are allowing organi Zations to achieve significant
savings in their data centers. These savings are being gained in reduced energy and hard …

One of the most elusive types of malware in recent times that pose significant challenges in
the computer security system is the kernel-level rootkits. The kernel-level rootkits can hide its …

Recent advances show that it is possible to reuse the legacy binary code to bridge the
semantic gap in virtual machine introspection (VMI). However, existing such VMI solutions …

It is generally believed to be a tedious, time-consuming, and error-prone process to develop
a virtual machine introspection (VMI) tool because of the semantic gap. Recent advance …

Modern malware like Stuxnet is complex and exploits multiple vulnerabilites in not only the
user level processes but also the OS kernel to compromise a system. A main trait of such …

We propose XTRec, a primitive that can record the instruction-level execution trace of a
commodity computing system. Our primitive is resilient to compromise to provide integrity of …