My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection

My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection

Explore new timing attacks for hypervisor detection in this 35-minute Black Hat conference talk. Delve into the world of sandbox evasion techniques, focusing on how hardware-assisted virtualization solutions introduce timing discrepancies that can be exploited by expert malware writers. Learn about low-level measurement sequences used to reveal these discrepancies and understand their implications for scalable dynamic malware analysis. Gain insights from speaker Daniele Cono D'Elia on the challenges faced in maintaining the integrity of virtualized environments against sophisticated detection methods.