The DOI matches its Crossref record; 35 of the 35 references it cites were found in a registry or an index.
HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity
Abstract
Virtualization is being widely adopted in today's computing systems. Its unique security advantages in isolating and introspecting commodity OSes as virtual machines (VMs) have enabled a wide spectrum of applications. However, a common, fundamental assumption is the presence of a trustworthy hypervisor. Unfortunately, the large code base of commodity hypervisors and recent successful hypervisor attacks (e.g., VM escape) seriously question the validity of this assumption. In this paper, we present HyperSafe, a lightweight approach that endows existing Type-I bare-metal hypervisors with a unique self-protection capability to provide lifetime control flow integrity. Specifically, we propose two key techniques. The first one, non-bypassable memory lockdown, reliably protects the hypervisor's code and static data from being compromised even in the presence of exploitable memory corruption bugs (e.g., buffer overflows), therefore successfully providing hypervisor code integrity. The second one, restricted pointer indexing, introduces one layer of indirection to convert the control data into pointer indexes. These pointer indexes are restricted such that the corresponding call/return targets strictly follow the hypervisor control flow graph, hence expanding protection to control-flow integrity. We have built a prototype and used it to protect two open-source Type-I hypervisors: BitVisor and Xen. The experimental results with synthetic hypervisor exploits and benchmarking programs show HyperSafe can reliably enable the hypervisor self-protection and provide the integrity guarantee with a small performance overhead.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Xen and the art of virtualization
Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I., & Warfield, A. (2003) · ACM SIGOPS Operating Systems Review · doi:10.1145/1165389.945462 · Cited by 5,915
KLEE: unassisted and automatic generation of high-coverage tests for complex systems programs
Cadar, C., Dunbar, D., & Engler, D. (2008) · doi:10.5555/1855741.1855756 · Cited by 2,620
Klein, G., Elphinstone, K., Heiser, G., Andronick, J., Cock, D., Derrin, P., Elkaduwe, D., Engelhardt, K., Kolanski, R., Norrish, M., et al. (2009) · Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles · doi:10.1145/1629575.1629596 · Cited by 1,633
Xen and the art of virtualization
Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., & Neugebauer, R. (2003) · Proceedings of the nineteenth ACM symposium on Operating systems principles - SOSP '03 · doi:10.1145/945461.945462 · Cited by 1,552
A Virtual Machine Introspection Based Architecture for Intrusion Detection.
Garfinkel, T., & Rosenblum, M. (2003) · Cited by 1,323
The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)
Shacham, H. (2007) · Proceedings of the 14th ACM conference on Computer and communications security · doi:10.1145/1315245.1315313 · Cited by 1,280
StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks
Cowan, C., Pu, C., Maier, D., Hintony, H., Walpole, J., Bakke, P., Beattie, S., Grier, A., Wagle, P., & Zhang, Q. (1998) · PDXScholar (Portland State University) · Cited by 1,278
Design and implementation of a TCG-based integrity measurement architecture
Sailer, R., Zhang, X., Jaeger, T., & van Doorn, L. (2004) · USENIX Security Symposium · Cited by 1,035
Abadi, M., Budiu, M., Erlingsson, Ú., & Ligatti, J. (2005) · Proceedings of the 12th ACM conference on Computer and communications security · doi:10.1145/1102120.1102165 · Cited by 1,032
Bugs as deviant behavior: a general approach to inferring errors in systems code
Engler, D., Chen, D. Y., Hallem, S., Chou, A., & Chelf, B. (2001) · Proceedings of the eighteenth ACM symposium on Operating systems principles · doi:10.1145/502034.502041 · Cited by 737
Cited by
An analysis of security issues for cloud computing
Hashizume, K., Rosado, D. G., Fernández-Medina, E., & Fernandez, E. B. (2013) · Journal of Internet Services and Applications · doi:10.1186/1869-0238-4-5 · Cited by 770
Eliminating the hypervisor attack surface for a more secure cloud
Szefer, J., Keller, E., Lee, R. B., & Rexford, J. (2011) · Proceedings of the 18th ACM conference on Computer and communications security · doi:10.1145/2046707.2046754 · Cited by 286
A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model
Akram, H., Konstantas, D., & Mahyoub, M. (2018) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2018.090349 · Cited by 193
Extensive Study of Cloud Computing Technologies, Threats and Solutions Prospective
Abu-Alhaija, M., M. Turab, N., & Hamza, A. (2022) · Computer Systems Science and Engineering · doi:10.32604/csse.2022.019547 · Cited by 8
Metadata
- Authors
- Wang, Z., & Jiang, X.
- Venue
- 2010 IEEE Symposium on Security and Privacy
- Publisher
- IEEE
- Published
- 2010
- Pages
- 380-395
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2133592286
- Cited by
- 403
- References
- 35
- FWCI
- 28.33
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity. https://app.cochat.ai/papers/10.1109/sp.2010.30
- The paper
- Wang, Z., & Jiang, X. (2010). HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity. 2010 IEEE Symposium on Security and Privacy. https://doi.org/10.1109/sp.2010.30
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
