Xen Developer & Design Virtual Summit 2020

Hypervisor Memory Introspection is a technique used for protecting virtual machines by leveraging the VMI features of hypervisors. Over the past 8 years, Bitdefender researchers developed - from scratch - an HVI technology and very recently open-sourced it, thus creating the first fully functional, commercial grade, open-source memory introspection technology. HVI works with the existing Xen and KVM hypervisors and is capable of protecting both Windows and Linux guest VMs against advanced attacks such as EternalBlue, BlueKeep, DirtyCoW and various other zero-days in common applications. In this talk, you will learn about the newly open-sourced HVI technology: how it works, how it integrates with existing hypervisors, how it achieves protection of virtual machines, performance figures, use-cases, and, ultimately, how security researchers can start contributing.