<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01518236</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-12T10:23:33+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">HyperForce: Hypervisor-enForced Execution of Security-Critical Code</title>
            <author role="aut">
              <persName>
                <forename type="first">Francesco</forename>
                <surname>Gadaleta</surname>
              </persName>
              <email type="md5">fc26082fcd72815b4a127aec77209d71</email>
              <email type="domain">cs.kuleuven.be</email>
              <idno type="idhal" notation="numeric">1007489</idno>
              <idno type="halauthorid" notation="string">1167128-1007489</idno>
              <affiliation ref="#struct-478873"/>
              <affiliation ref="#struct-70936"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nick</forename>
                <surname>Nikiforakis</surname>
              </persName>
              <email type="md5">2e7361608f456f337e5f410db98c20c1</email>
              <email type="domain">cs.kuleuven.be</email>
              <idno type="idhal" notation="numeric">1007490</idno>
              <idno type="halauthorid" notation="string">869377-1007490</idno>
              <affiliation ref="#struct-70936"/>
              <affiliation ref="#struct-478873"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jan</forename>
                <forename type="middle">Tobias</forename>
                <surname>Mühlberg</surname>
              </persName>
              <email type="md5">04d057174e54d2ccd077b22c3b42bc42</email>
              <email type="domain">cs.kuleuven.be</email>
              <idno type="idhal" notation="numeric">999031</idno>
              <idno type="halauthorid" notation="string">1115796-999031</idno>
              <affiliation ref="#struct-70936"/>
              <affiliation ref="#struct-478873"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Wouter</forename>
                <surname>Joosen</surname>
              </persName>
              <email type="md5">32f94ad3060da5afc8ecf64a8f7bcf12</email>
              <email type="domain">cs.kuleuven.be</email>
              <idno type="idhal" notation="numeric">989267</idno>
              <idno type="halauthorid" notation="string">434970-989267</idno>
              <affiliation ref="#struct-70936"/>
              <affiliation ref="#struct-478873"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-05-04 13:45:30</date>
              <date type="whenModified">2026-05-12 10:18:05</date>
              <date type="whenReleased">2017-05-04 14:53:54</date>
              <date type="whenProduced">2012-06-12</date>
              <date type="whenEndEmbargoed">2015-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01518236v1/document">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01518236v1/file/978-3-642-30436-1_11_Chapter.pdf" id="file-1518236-1579116">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-30436-1_11.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01518236</idno>
            <idno type="halUri">https://inria.hal.science/hal-01518236</idno>
            <idno type="halBibtex">gadaleta:hal-01518236</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Information Security and Privacy Conference (SEC)&lt;/i&gt;, Jun 2012, Heraklion, Crete, Greece. pp.126-137, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-30436-1_11"&gt;&amp;#x27E8;10.1007/978-3-642-30436-1_11&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. pp.126-137, &amp;#x27E8;10.1007/978-3-642-30436-1_11&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1518236-1579116"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-376" corresp="IFIP-AICT">Information Security and Privacy Research</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 3: System Security</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">HyperForce: Hypervisor-enForced Execution of Security-Critical Code</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Francesco</forename>
                    <surname>Gadaleta</surname>
                  </persName>
                  <email type="md5">fc26082fcd72815b4a127aec77209d71</email>
                  <email type="domain">cs.kuleuven.be</email>
                  <idno type="idhal" notation="numeric">1007489</idno>
                  <idno type="halauthorid" notation="string">1167128-1007489</idno>
                  <affiliation ref="#struct-478873"/>
                  <affiliation ref="#struct-70936"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nick</forename>
                    <surname>Nikiforakis</surname>
                  </persName>
                  <email type="md5">2e7361608f456f337e5f410db98c20c1</email>
                  <email type="domain">cs.kuleuven.be</email>
                  <idno type="idhal" notation="numeric">1007490</idno>
                  <idno type="halauthorid" notation="string">869377-1007490</idno>
                  <affiliation ref="#struct-70936"/>
                  <affiliation ref="#struct-478873"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jan</forename>
                    <forename type="middle">Tobias</forename>
                    <surname>Mühlberg</surname>
                  </persName>
                  <email type="md5">04d057174e54d2ccd077b22c3b42bc42</email>
                  <email type="domain">cs.kuleuven.be</email>
                  <idno type="idhal" notation="numeric">999031</idno>
                  <idno type="halauthorid" notation="string">1115796-999031</idno>
                  <affiliation ref="#struct-70936"/>
                  <affiliation ref="#struct-478873"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Wouter</forename>
                    <surname>Joosen</surname>
                  </persName>
                  <email type="md5">32f94ad3060da5afc8ecf64a8f7bcf12</email>
                  <email type="domain">cs.kuleuven.be</email>
                  <idno type="idhal" notation="numeric">989267</idno>
                  <idno type="halauthorid" notation="string">434970-989267</idno>
                  <affiliation ref="#struct-70936"/>
                  <affiliation ref="#struct-478873"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>27th Information Security and Privacy Conference (SEC)</title>
                  <date type="start">2012-06-12</date>
                  <date type="end">2012-06-06</date>
                  <settlement>Heraklion, Crete</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Dimitris Gritzalis</editor>
                <editor>Steven Furnell</editor>
                <editor>Marianthi Theoharidou</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security and Privacy Research</biblScope>
                  <biblScope unit="volume">AICT-376</biblScope>
                  <biblScope unit="pp">126-137</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-30436-1_11</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">countermeasure</term>
                <term xml:lang="en">virtual devices</term>
                <term xml:lang="en">hypervisor</term>
                <term xml:lang="en">virtualization</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The sustained popularity of the cloud and cloud-related services accelerate the evolution of virtualization-enabling technologies. Modern off-the-shelf computers are already equipped with specialized hardware that enables a hypervisor to manage the simultaneous execution of multiple operating systems. Researchers have proposed security mechanisms that operate within such a hypervisor to protect the virtualized operating systems from attacks. These mechanisms improve in security over previous techniques since the defense system is no longer part of an operating system’s attack surface. However, due to constant transitions between the hypervisor and the operating systems, these countermeasures typically incur a significant performance overhead.In this paper we present HyperForce, a framework which allows the deployment of security-critical code in a way that significantly outperforms previous in-hypervisor systems while maintaining similar guarantees with respect to security and integrity. HyperForce is a hybrid system which combines the performance of an in-guest security mechanism with the security of in-hypervisor one. We evaluate our framework by using it to re-implement an invariance-based rootkit detection system and show the performance benefits of a HyperForce-utilizing countermeasure.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-478873" status="VALID">
          <orgName>FUTURE HEALTH DEPARTMENT [KU Leuven]</orgName>
          <orgName type="acronym">KU-IBBT</orgName>
          <desc>
            <address>
              <country key="BE"/>
            </address>
            <ref type="url">http://www.kuleuven.be/samenwerking/iminds/test/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300656" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-70936" status="VALID">
          <orgName>Distributed Systems and Computer Networks</orgName>
          <orgName type="acronym">DistriNet</orgName>
          <desc>
            <address>
              <addrLine>DistriNet Research Group K.U. Leuven (postbox 2402) Dept. Computer Science Celestijnenlaan 200A B-3001 Heverlee</addrLine>
              <country key="BE"/>
            </address>
            <ref type="url">http://distrinet.cs.kuleuven.be/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300656" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300656" status="VALID">
          <idno type="IdRef">026458632</idno>
          <idno type="ROR">https://ror.org/05f950310</idno>
          <orgName>Catholic University of Leuven = Katholieke Universiteit Leuven</orgName>
          <orgName type="acronym">KU Leuven</orgName>
          <desc>
            <address>
              <addrLine>Oude Markt 13 - bus 5005, 3000 Leuven</addrLine>
              <country key="BE"/>
            </address>
            <ref type="url">http://www.kuleuven.be/english/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>