|
|
|
|
|
|
by dist-epoch
380 days ago
|
|
|
It's various pieces are called Virtualization Based Security/Core Isolation/Hypervisor-Protected Code Integrity > Virtualization-based security, or VBS, uses hardware virtualization and the Windows hypervisor to create an isolated virtual environment that becomes the root of trust of the OS that assumes the kernel can be compromised. > While VBS greatly improves platform security, VBS also changes the trust boundaries in a Windows PC. With VBS, the Windows hypervisor controls many aspects of the underlying hardware that provide the basis for the VBS secure environment. The hypervisor must assume the Windows kernel could become compromised by malicious code, and so must protect key system resources from being manipulated from code running in kernel mode in a manner that could compromise security assets. https://learn.microsoft.com/en-us/windows-hardware/design/de... https://learn.microsoft.com/en-us/windows-hardware/design/de... Architecture Image:
https://www.microsoft.com/en-us/security/blog/wp-content/upl... |
|
|
