High Performance VM Introspection

Explore hypervisor memory introspection as a security solution for virtual machines in this 25-minute conference talk from BSidesSF 2019. Delve into the challenges of performance impact due to memory access restrictions and discover an innovative approach to filtering page-table accesses using an in-guest agent. Learn about the second-level address translation (SLAT) mechanism, virtualization exception (#VE), and methods for protecting the in-guest agent from potential malicious activities. Gain insights into improving page-table monitoring, performance figures, and key takeaways for implementing high-performance VM introspection in your security infrastructure.