Black Hat 2008: The Zen of Xen

Joanna Rutkowska talks about the security of the Xen Hypervisor, the latest updates to Blue Pill and other things IT managers need to think about regarding Hypervisor security.

Category:

Science & Technology

Tags:

• Dark
• Reading
• HyperV
• Xen
• Security
• Invisible
• Things
• Lab
• Virtual
• machine
• security
• TechWeb
• Black
• Hat
• Hypervisor

[c0rt3x86]

Really the smartest as well as cutest girl a hacker can dream of! I think i've fallen in love with her ;-)

[wdcapl]

Unfortunatelly, YOU ARE WRONG.

Haveing such a imagination as Joanna is a really BIG GIFT!!!. Imagination is a MUST for finding bugs, blackholes and so on.....

Both creators and hackers, are the made of art ;]

[re21b]

Te amo..



[hck112]

@maqsad1 I love how you look at the big picture of computer security without doing research or even work with the subject matters.

[maqsad1]

@maqsad1 at 6:20 she even admits that it's more secure to use a VM for online banking. You really have no idea what she is talking about and not that much more about what you are talking about either.

[maqsad1]

@hck112 Anybody can run the same backdoor on a non virtualized system which makes that argument nill. Malware detection is many times easier with virtualized systems because you can transfer VMs back and forth. Also you can make snapshots and revert back and forth to snapshots. Also, VM snapshots are extremely useful for analyzing malware.

She was probably only referring to the VT-X extensions in the CPU which could hide rootkits but that's a hardware issue not a virtualization issue.

[hck112]

@maqsad1 It's foolish to believe that virtualization increase security. Anyone can run a backdoor on your main system off the hook of your virtual system that you wouldn't even notice. In fact virtualization makes security harder to manage and detect malware.

Joanna says this in a possible way because she is the pioneer in this kind of security. In fact her Blue Pill backdoor is an example, or you want wiser example? Look at worms like Conficker and Code Red.

[maqsad1]

@hck112 No, why do you say that?

[hck112]

I love how Youtubers are so pervert...

[hck112]

However she wants her project to profit for her own good, which is right and wrong. Those guys that hosted Black Hat con wants to debunk her project but she want to get profit back if they are failed to do so.

Well the debunk never happened because none agreed to each other. Which is sad...

[hck112]

@maqsad1 wow are you living in the 80s?

[BXhjuUfK2p]

NEW;'`IPAD2';;ＦＲＥＥ:''SITES``;;­;`

ＷＷＷ.ＹＥＳＩＰＡＤ２Ｓ.ＴＫ

COPY SITE & PASTE