LVBS and Advanced Kernel Integrity

Explore advanced kernel integrity features through Linux Virtualization based Security (LVBS) in this 32-minute conference talk by Thara Gopinath from Microsoft. Delve into how LVBS utilizes hardware virtualization and Hyper-V to create an isolated virtual environment with higher trust level (VTL1). Examine the current state of the Linux kernel and various features manipulating page tables for code injection or modification. Learn how LVBS can harden these features to ensure code authenticity and integrity, even in compromised kernels. Discover the progress in hardening specific features and future goals for protecting key kernel data structures against unauthorized modifications. Gain insights into enhancing kernel security and safeguarding critical resources using virtualization-based techniques.