-
Notifications
You must be signed in to change notification settings - Fork 3
vmsplit/IceVMM
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
#################################
___ ___ _____ ____ __ __ __
|_ _/ __| __\ \ / / \/ | \/ |
| | (__| _| \ V /| |\/| | |\/| |
|___\___|___| \_/ |_| |_|_| |_|
#################################
IceVMM is a "toy" HyperVisor specifically designed to proof-of-concept
security in the HyperVisor (i.e. Kernel security features such as LKRG,
CFI, PaX, etc.)
This is because nowadays Kernel security features are quite simple to disable/patch/bypass,
especially on Linux.
To at least *remediate* or mitigate such possibilties i'm demonstrating
(a sort of already done) concept where I'll showcase the practicality of moving these
security features from the Kernel -> HyperVisor.
NOTE:
This is a work in progress. I am at college doing college shit.
In lieu of actively pushing updates i'll be doing offline development and when i've actually
got some shit done i'll push it.
I wrote a paper a while back about this for Phrack 72 but I:
1. missed the deadline
2. didn't have a complete version I was "satisifed" with
3. eventually lost it by erasing my entire NixOS root filesystem partition
Just like any project this could have a chance to flourish with time
and dedication.
Unfortunately the education system and my brain don't get along
so it'll be frustrating...but eventually i'll get this done.
About
minimal hypervisor for aarch64 (WIP)
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published