Hypervisor Support for Identifying Covertly Executing Binaries

Lionel Litty, H. Andrés Lagar-Cavilla, David Lie. Hypervisor Support for Identifying Covertly Executing Binaries. In Paul C. van Oorschot, editor, Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA. pages 243-258, USENIX Association, 2008. [doi]

@inproceedings{LittyLL08,
  title = {Hypervisor Support for Identifying Covertly Executing Binaries},
  author = {Lionel Litty and H. Andrés Lagar-Cavilla and David Lie},
  year = {2008},
  url = {http://www.usenix.org/events/sec08/tech/full_papers/litty/litty.pdf},
  researchr = {https://researchr.org/publication/LittyLL08},
  cites = {0},
  citedby = {0},
  pages = {243-258},
  booktitle = {Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA},
  editor = {Paul C. van Oorschot},
  publisher = {USENIX Association},
  isbn = {978-1-931971-60-7},
}