|
Hyperjacking is an attack where a user takes malicious control over the hypervisor that creates the virtual environment within a virtual machine (VM) host.〔(【引用サイトリンク】url=http://itsecurity.telelink.com/hyperjacking/ )〕 The point of the attack is to target the operating system that's below the VM's so that the attackers program can run and the applications on the VMs above it will be completely oblivious to its presence. == Overview == Hyperjacking involves installing a malicious, fake hypervisor that can manage the entire server system. Regular security measures are ineffective because the operating system will not be aware that the machine has been compromised. In hyperjacking, the hypervisor specifically operates in stealth mode and runs beneath the machine, it makes more difficult to detect and more likely gain access to computer servers where it can affect the operation of the entire institution or company. If the hacker gains access to the hypervisor, everything that is connected to that server can be manipulated. The hypervisor represents a single point of failure when it comes to the security and protection of sensitive information. For a hyperjacking attack to succeed, an attacker would have to take control of the hypervisor by the following methods: * Injecting a rogue hypervisor beneath the original hypervisor * Directly obtaining control of the original hypervisor * Running a rogue hypervisor on top of an existing hypervisor 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Hyperjacking」の詳細全文を読む スポンサード リンク
|