DeepAI AI Chat
Log In Sign Up

IRIS: a Record and Replay Framework to Enable Hardware-assisted Virtualization Fuzzing

03/22/2023
by   Carmine Cesarano, et al.
University of Naples Federico II
0

Nowadays, industries are looking into virtualization as an effective means to build safe applications, thanks to the isolation it can provide among virtual machines (VMs) running on the same hardware. In this context, a fundamental issue is understanding to what extent the isolation is guaranteed, despite possible (or induced) problems in the virtualization mechanisms. Uncovering such isolation issues is still an open challenge, especially for hardware-assisted virtualization, since the search space should include all the possible VM states (and the linked hypervisor state), which is prohibitive. In this paper, we propose IRIS, a framework to record (learn) sequences of inputs (i.e., VM seeds) from the real guest execution (e.g., OS boot), replay them as-is to reach valid and complex VM states, and finally use them as valid seed to be mutated for enabling fuzzing solutions for hardware-assisted hypervisors. We demonstrate the accuracy and efficiency of IRIS in automatically reproducing valid VM behaviors, with no need to execute guest workloads. We also provide a proof-of-concept fuzzer, based on the proposed architecture, showing its potential on the Xen hypervisor.

READ FULL TEXT

page 1

page 2

page 3

page 4

05/16/2017

Engineering Record And Replay For Deployability: Extended Technical Report

The ability to record and replay program executions with low overhead en...
08/19/2020

Open Source Iris Recognition Hardware and Software with Presentation Attack Detection

This paper proposes the first known to us open source hardware and softw...
08/30/2022

Ærø: A Platform Architecture for Mixed-Criticality Airborne Systems

Real-time embedded platforms with resource constraints can take the bene...
10/10/2021

Garmr: Defending the gates of PKU-based sandboxing

Memory Protection Keys for Userspace (PKU) is a recent hardware feature ...
06/30/2010

Dynamic and Transparent Analysis of Commodity Production Systems

We propose a framework that provides a programming interface to perform ...
04/15/2020

Implementing Software Resiliency in HPX for Extreme Scale Computing

Exceptions and errors occurring within mission critical applications due...