A Thin Hypervisor Assisting Threat Hunt Based on Behavioral Observation

Abstract: Reverse-engineering malware is an important task in cyber security. The thesis presents a method for malware analysis which helps to detect the possible threats and by-pass vulnerabilities using hypervisor-based method. The purpose of this study is to develop a thin hypervisor with a monitoring component to provide a data security and protection to the host system. Also, the thesis aims to provide a behavioral based malware analysis on a malware lab to hunt for various malware with evasion resistance. The thin protective hypervisor aims to analyze the threat behavior and mitigate those using innovative monitoring component with better performance, transparency, kernel integrity and scalability.

Keywords: Hypervisor, Virtual Machine, Monitoring Component, Malware, Virtualization, Cyber Security