• DOI:10.5220/0007566101550162
Corpus ID: 88483431

Hypervisor-assisted Atomic Memory Acquisition in Modern Systems

@inproceedings{Kiperberg2019HypervisorassistedAM,
  title={Hypervisor-assisted Atomic Memory Acquisition in Modern Systems},
  author={Michael Kiperberg and R. Leon and A. Resh and Asaf Algawi and N. Zaidenberg},
  booktitle={ICISSP},
  year={2019}
}

Michael Kiperberg, R. Leon, +2 authors N. Zaidenberg

Published in ICISSP 2019

Computer Science

Reliable memory acquisition is essential to forensic analysis of a cyber-crime. Various methods of memory acquisition have been proposed, ranging from tools based on a dedicated hardware to software only solutions. Recently, a hypervisor-based method for memory acquisition was proposed (Qi et al., 2017; Martignoni et al., 2010). This method obtains a reliable (atomic) memory image of a running system. The method achieves this by making all memory pages non-writable until they are copied to the… CONTINUE READING

View via Publisher

scitepress.org

Save to Library

Create Alert

Cite

Launch Research Feed