View Proposal

---

Proposer

Mike Just

Title

Virtual Machine Introspection (MEng Masterclass)

Goal

To create a lecture and lab on the topic of virtual machine introspection

Description

Virtual Machine Introspection (VMI) involves monitoring the operation of a guest virtual machine (VM), typically from outside the VM. This includes investigating events such as interrupts, memory writes, and network access. VMI can be used for security and digital forensics purposes (e.g., studying malware, and/or the operation of a running OS image). You should create a lecture that introduces VMI and explain how it works, describing the detail of different options. An accompanying lab should allow for hands-on exercises for some of the options from your lecture.

Resources

You'll need a hypervisor, possibly docker, and relevant tools/libraries for performing VMI.

Background

Some previous experience using VMs, and some knowledge of low-level systems, such as memory access.

Url

Difficulty Level

Moderate

Ethical Approval

None

Number Of Students

1

Supervisor

Mike Just

Keywords

cyber security, digital forensics

Degrees

Master of Engineering in Software Engineering