SEER: Practical Memory Virus Scanning as a Service

Presentation pdf 1.7MB

We propose SEER as an architecture for enabling Memory Virus Scanning-as-a-Service for virtualized environments. SEER can reduce the amount of data to scan by up to 87% compared to naively applying file-based scanning approaches. SEER provides a practical solution for cloud vendors to transparently and periodically scan virtual machine memory for malware.

Author(s):

Jason Gionta    
North Carolina State University
United States

Ahmed Azab    
Samsung Electronics Co., Ltd.
United States

William Enck    
North Carolina State University
United States

Peng Ning    
North Carolina State University
United States

Xiaolan Zhang    
Google Inc.
United States