Virtualization-oriented Design And Implementation Of Memory Forensicsand Securiy Solution For Iot System

In recent years,IoT(Internet of Things)has become increasingly popular in our daily life.When people enjoy the convenience of IoT,they are also taking immense risks because of the security concerns of IoT system.The traditional detection system of IoT and the IoT system which need to be protected are in the same operating system.When the operating system is attacked by malicious programs such as Rootkit which could tamper with the system kernel,the detection system will be damaged or breakdown.Furthermore,since the detection system is in an insecurity operating system,some malicious programs which lurked in the operating system could easily manipulate the detection system's detection results.It leads to the loss of credibility of the detection system's results.In this thesis,we analyze the shortcomings of existing works about IoT security solutions and put forward a new idea which is more suitable for IoT detection system.First,we put the IoT detection system in an isolated security system which takes advantage of virtualization technology.Then,we use memory forensics for detecting the IoT system.According to this idea,we design and achieve a security scheme for IoT system.In this way,the detection solution could be credible.At last,we use virtual machine monitor to provide a variety of restoration measures.Finally,the scheme is proven feasible by extensive testing under real environment.