Virtualization security research aims to give all children secure laptops. Current applications have no isolation and complex kernels avoid vulnerability. Researchers propose a Virtual Machine Monitor to more rigorously access control programs in virtual machines or sandboxes that see only their own files/processes. This isolates resources and detects malicious programs. Researchers must change architectures to securely virtualize modern devices and instrument programs to run in virtual machines for security through obscurity.

1. !quot;#$%&'()&*)+&%'$,-&.quot;/)
0*1&%2*3quot;*'4
!quot;#$%&'()%%*+,quot;-,
.%*,%)'/0)'!%+%quot;)#$'0*'.0123,quot;,40*'quot;*-'50#4%,6
7quot;)8quot;)-'5#$00&'0/'9*:4*%%)4*:'quot;*-';22&4%-'5#4%*#%+
<#,0=%)''>?@'A??B
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

2. 51quot;%1&quot;6
8+,9:%(1#2&(#&6.%$1+;.<+$.(#
=.%$1+;.<+$.(#&$(&0%($quot;,$&*('$>+%quot;?0;+$'(%/*&'%(/&
/+;>+%quot;
=.%$1+;.<+$.(#&$(&2quot;$quot;,$&/+;>+%quot;
=.%$1+;.<quot;2&/+;>+%quot;
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+:
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

3. 78,')&4)1&%'$,-&.,'&2*9
@A*$%+,$.(#&('&,(/01$+$.(#+;&%quot;*(1%,quot;*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+;
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

4. +:7,%quot;)2*)5!);
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+<
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

5. 0<,3=-quot;4)2>)1&%'$,-&.,'&2*
B/1;+$.(#&C&$%+#*;+$quot;&+;;&.#*$%1,$.(#*
DBE7F&8(,-*
G+%+6.%$1+;.<+$.(#&C&%quot;H1.%quot;*&,-+#:quot;*&$(&I3
7EJF&Kquot;#
L+$.6quot;&6.%$1+;.<+$.(#&C&%quot;H1.%quot;&*+/quot;&+%,-.$quot;,$1%quot;F&
/(*$&.#*$%1,$.(#*&quot;Mquot;,1$quot;2&#+$.6quot;;4
=EN+%quot;
I3OJquot;6quot;;&6.%$1+;.<+$.(#&C&*+/quot;&I3F&.*(;+$quot;&%quot;*(1%,quot;*
=3quot;%6quot;%
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+=
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

6. ?quot;#quot;*')@/1,*#quot;4)&*)1&%'$,-&.,'&2*
P+*$quot;%&-+%2>+%quot;
Lquot;>&-+%2>+%quot;&*100(%$Q&R#$quot;;&O=S+#2&@ETO=
7*quot;*
!(/0+$.A.;.$4
R##(6+$.(#
5+%2>+%quot;&,(*$&,(#$%(;
3quot;,1%.$4
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+>
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

7. +&%'$,-&.,'&2*),*/)!quot;#$%&'(
R*(;+$quot;&+#2&0%($quot;,$&*('$>+%quot;&'%(/&/+;.,.(1*&
0%(:%+/*&U/+;>+%quot;V
3+#2A(M&0%(:%+/*&.#&(>#&+22%quot;**&*0+,quot;
Equot;2.+$quot;&>.$-&;quot;+#F&*quot;,1%quot;&=EE
Tquot;$quot;,$&/+;>+%quot;
7*quot;&quot;/1;+$.(#&$(&%1#&/+;>+%quot;&.#&+&*+'quot;&quot;#6.%(#/quot;#$
3$(0F&/(6quot;F&%quot;0;+4&quot;6quot;#$*&.#&6.%$1+;&/+,-.#quot;*
=.%$1+;.<quot;2&/+;>+%quot;
)(($9.$*&$-+$&-.2quot;&1#2quot;%#quot;+$-&I3
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+?
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

8. +&%'$,-&.,'&2*)>2%)A42-,'&2*
G%quot;*quot;#$.#:&6.%$1+;&.#$quot;%'+,quot;*&$(&%quot;*(1%,quot;*&,+#&;./.$&
+#2&,(#$%(;&$-quot;&+,,quot;**&('&/+;.,.(1*&0%(:%+/*&$(&
%quot;*(1%,quot;*
@&=.%$1+;&E+,-.#quot;&E(#.$(%&U=EEV&,+#&2(&/(%quot;&
%.:(%(1*&+,,quot;**&,(#$%(;
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+@
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

9. 5*quot;)B,='2=)Cquot;%)D8&-/)
IJG!&0%(Wquot;,$&+./*&$(&
:.6quot;&+;;&,-.;2%quot;#&;+0$(0*
!+##($&2quot;/+#2&X&4quot;+%&
(;2&,-.;2%quot;#&*quot;,1%quot;&
$-quot;.%&/+,-.#quot;*
Lquot;quot;2&>+4&$(&+;;(>&$-quot;/&
$(&:quot;$&-+,9quot;2&+#2&*$.;;&
Aquot;&(9
@#*>quot;%Q&6.%$1+;.<+$.(#
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+A
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

10. 5BCDE)+!quot;%1quot;%),*/)F&'>%24'
!1%%quot;#$&+00;.,+$.(#*&-+6quot;&#(&.*(;+$.(#&
3(;.$+.%quot;&,+#&+,,quot;**&#quot;$>(%9F&,+/quot;%+F&1*quot;%&
2(,1/quot;#$*F&0+**>(%2*&quot;$,
G%(:%+/*&quot;Mquot;,1$quot;&.#&6.%$1+;&/+,-.#quot;*&U(%&*+#2A(Mquot;*&
(%&W+.;*V&$-+$&,+#&(#;4&*quot;quot;&.$*&(>#&'.;quot;*?0%(,quot;**quot;*
G%(:%+/*&/1*$&%quot;H1quot;*$&+22.$.(#+;&0quot;%/.**.(#*&'%(/&
$-quot;&=EE
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4B
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

11. G8&*)H(=quot;%1&42%4
BM.*$.#:&I3&9quot;%#quot;;*&$((&
A.:&+#2&,(/0;quot;M&$(& 2&#.*$+ G8quot;',+ G8quot;',+
+6(.2&61;#quot;%+A.;.$4 2&$quot;$quot;quot;)* 2&#$quot;$quot;)* 2&#$quot;$quot;)*
3/+;;&-40quot;%6.*(%&2(quot;*& HFF6 HFF6 HFF6
*,-quot;21;.#:F&.*(;+$.(#&
-.#9.# I-+4 I-+:
G)#.
G+%quot;#$&0+%$.$.(#&
/+#+:quot;*&0quot;%/.**.(#* Equot;*,)D6+80F.#9quot;6)#
C&#,D&#.
Yquot;quot;0&-40quot;%6.*(%&*quot;,1%quot;
G1*-&2+#:quot;%(1*&+00*&
.#$(&6.%$1+;&/+,-.#quot;*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+44
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

12. +&%'$,-&.,'&2*)'2)Iquot;'quot;#'):,-6,%quot;
E+#4&0%(0quot;%$.quot;*&('&6.%$1+;.<+$.(#&1*quot;'1;&'(%&2quot;$quot;,$.#:&
/+;.,.(1*&*('$>+%quot;
S+/0quot;%&%quot;*.*$+#,quot;
3+'quot;$4?R*(;+$.(#
R#*$%1/quot;#$+$.(#
)quot;>.#2?%quot;0;+4&0%(0quot;%$.quot;*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4:
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

13. B&3&','&2*4)2>)J4&*K)+&%'$,-&.,'&2*)>2%)
:,-6,%quot;)Iquot;'quot;#'&2*
).,quot;Z*&$-quot;(%quot;/&C&#(#$%.6.+;&0%(0quot;%$.quot;*&('&,(/01$quot;%&
0%(:%+/*&,+##($&Aquot;&2quot;$quot;%/.#quot;2&+1$(/+$.,+;;4
3quot;/+#$.,&:+0&C&/(%quot;&,(#$quot;M$&.#*.2quot;&('&+&6.%$1+;&
/+,-.#quot;&$-+#&(1$*.2quot;&('&.$
@#&(0quot;%+$.#:&*4*$quot;/&*quot;quot;*&0%(,quot;**quot;*&+#2&'.;quot;*&6quot;%*1*&
%quot;:.*$quot;%*F&2.*9&A;(,9*&+#2&/quot;/(%4&0+:quot;*&(1$*.2quot;
R#*$%1/quot;#$+$.(#&,+#&-quot;;0&UA1$&0(**.A;4&,(%%10$.A;quot;V
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4;
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

14. 03$-,'&2*)&*)@*'&L1&%$4)'22-4
E(2quot;%#&6.%1*quot;*&1*quot;&0(;4/(%0-.*/&$(&quot;6+2quot;&
2quot;$quot;,$.(#&A4&*.:#+$1%quot;
I#;4&>+4&$(&2quot;$quot;,$&$-.*&/+;>+%quot;&.*&$-%(1:-&
quot;/1;+$.(#&.#&+#&.*(;+$quot;2&6.%$1+;&/+,-.#quot;
30quot;,.'.,&quot;/1;+$.(#&$quot;,-#.H1quot;*&,+#&Aquot;&,(1#$quot;%quot;2&A4&
6.%1*&+1$-(%*&U21quot;&$(&;./.$+$.(#*&(#&0%quot;6.(1*&*;.2quot;V
)quot;*1;$Q&*quot;,1%.$4&$-%(1:-&(A*,1%.$4&>(%9*&-quot;%quot;F&>+#$&
$(&1*quot;&+&2.''quot;%quot;#$&+#$.O6.%1*&$((;&$-+#&$-quot;&/+**quot;*&
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4<
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

15. ?$**&*K)5$'L2>L'8quot;LF2<)Iquot;'quot;#'&2*)&*)
'8quot;)+&%'$,-):,#8&*quot;)B,(quot;%
K1M.+#&[.+#:&quot;$&+;&$(&+00quot;+%&@!E&!!3&]]^
)quot;,%quot;+$quot;&.#$quot;%#+;&*$+$quot;&quot;M$quot;%#+;;4&.#&$-quot;&=EE&
UA%.2:quot;&$-quot;&*quot;/+#$.,&:+0V
)quot;,(#*$%1,$&'.;quot;*?2.%quot;,$(%.quot;*&'%(/&%+>&6.%$1+;&2.*9
)quot;,(#*$%1,$&0%(,quot;**&.#'(%/+$.(#&'%(/&6.%$1+;&/quot;/(%4
!(/0+%quot;&.#$quot;%#+;&6.quot;>&>.$-&%quot;,(#*$%1,$quot;2&6.quot;>&$(&
'.#2&%(($&9.$*
=.quot;>&%quot;,(#*$%1,$.(#&:((2&quot;#(1:-&$(&%1#&(1$O('O$-quot;O
A(M&+#$.O6.%1*&*('$>+%quot;&U34/+#$quot;,F&Y+0quot;%*94F&
E,@'quot;quot;F&PO3quot;,1%quot;F&quot;$,V
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4=
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

16. +&%'$,-)H2*quot;(*quot;'4
5(#quot;4#quot;$*&+%quot;&1*quot;'1;&
'(%&#quot;$>(%9&*quot;,1%.$4
=.%$1+;.<+$.(#&+;;(>*&+&
>-(;quot;&#quot;$>(%9&$(&Aquot;&
%1#&(#&+&*.#:;quot;&
,(/01$quot;%
!(*$&*+6.#:*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4>
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

17. M&*/&*K):,-&#&2$4)7quot;N4&'quot;4
>quot;A&_]&/quot;+#*&>quot;A*.$quot;*&,+#&.#'quot;,$&/+,-.#quot;*&1*.#:&
A%(>*quot;%&61;#quot;%+A.;.$.quot;*
!(/0%(/.*quot;2&-(*$.#:&'+,.;.$.quot;*&/quot;+#&#($&W1*$&
*9quot;$,-4&>quot;A*.$quot;*
`((:;quot;&1*quot;2&=E*&$(&+#+;4<quot;&>quot;AOA+*quot;2&/+;>+%quot;
)1#&RB&.#&+&6.%$1+;&/+,-.#quot;
)quot;,(%2&+;;&5SSG&'quot;$,-quot;*F&#quot;>&0%(,quot;**quot;*F&,-+#:quot;*&$(&
%quot;:.*$%4&+#2&'.;quot;&*4*$quot;/*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4?
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

18. !=(C%2<()O:248#8$P)quot;'),-Q
7*quot;#.M&3quot;,1%.$4&]]^
S((;&$(&2quot;$quot;,$&/+;.,.(1*& 5F34-' C)0D6
&>quot;A*.$quot;* #quot;#$% G)0*,'9*-
3$+$.,&+#+;4*.* 526C)0D6
=E&2(>#;(+2*&$-quot;& HI
>quot;A0+:quot;
R'&*+'quot;F&*quot;#2&$(&1*quot;%
)quot;*1;$*&01$&.#&$-quot;&,+,-quot; E%=
P;+>Q&#(#2quot;$quot;%/.#.*/
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4@
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

19. +&%'$,-&.quot;/):,-6,%quot;
L($&+;;&+22quot;2&*quot;,1%.$4F&#quot;>&(00(%$1#.$.quot;*&'(%&
/+;>+%quot;
=.%$1+;.<quot;2&%(($9.$*
3.2quot;&!-+##quot;;&+$$+,9*
81:*&.#&=EE*
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+4A
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

20. G,Pquot;)'8quot;)RF-$quot;)C&--S
Tquot;6quot;;(0quot;2&A4&[(+##+&)1$9(>*9+
=EE&+*&%(($&9.$
R#*$quot;+2&('&-.2.#:&4(1%&,(#$%(;&('&+&,(/0%(/.*quot;2&
*4*$quot;/&.#&$-quot;&9quot;%#quot;;F&.#*quot;%$&$-.#&-40quot;%6.*(%&Aquot;;(>&.$
)1#*&+$&+&-.:-quot;%&;quot;6quot;;&('&0%.6.;quot;:quot;F&*(&,+#&*$.;;&
,(#$%(;&$-quot;&/+,-.#quot;
5+%2&$(&2quot;$quot;,$&>.$-.#&$-quot;&I3
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+:B
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

21. Gquot;#8*&T$quot;4)'2)Iquot;'quot;#')+&%'$,-&.quot;/)
:,-6,%quot;
=quot;%4&2.''.,1;$&$(&-.2quot;&$-+$&6.%$1+;.<+$.(#&.*&-+00quot;#.#:
S./.#:&.**1quot;*
SJ8&0%('.;.#:
Tquot;'quot;+$.#:&$-quot;*quot;&%quot;H1.%quot;*&+&A.:&,(2quot;&A+*quot;
5+%2&$(&2.*$.#:1.*-&a:((2b&=EE&'%(/&aA+2b&=EE
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+:4
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

22. !&/quot;)D8,**quot;-)@'',#P4
5(>&.*(;+$quot;2&+%quot;&6.%$1+;&/+,-.#quot;*c&
!+#&$-quot;4&*04&(#&quot;+,-&($-quot;%c
=E*&*-+%quot;&$-quot;&%quot;*(1%,quot;*&('&+&*.#:;quot;&-(*$
R'&/1;$.0;quot;&=E*&$%4&$(&1*quot;&$-quot;&*+/quot;&%quot;*(1%,quot;&$-quot;4&
/+4&#($.,quot;
E.$.:+$quot;2&A4&(#;4&+;;(>.#:&quot;+,-&/+,-.#quot;&+&*0quot;,.'.quot;2&
*-+%quot;&('&$-quot;&%quot;*(1%,quot;
81$&#($&,(/0;quot;$quot;;4F&+#2&+$&:%quot;+$&quot;''.,.quot;#,4&;(**
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+::
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

23. M$'$%quot;)I&%quot;#'&2*4
7A.H1.$(1*&6.%$1+;.<+$.(#&,-+#:quot;*&*quot;,1%.$4&
;+#2*,+0quot;
B''quot;,$*&A($-&:((2&+#2&.;;
3quot;,1%quot;&J+1#,-c
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+:;
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4

24. D2*#-$4&2*4
=.%$1+;.<+$.(#&-+*&./0(%$+#$&*quot;,1%.$4&./0;.,+$.(#*
a@%/*&%+,quot;b&Aquot;$>quot;quot;#&-+,9quot;%*&+#2&2quot;'quot;#2quot;%*
J($&('&.#$quot;%quot;*$.#:&>(%9&.#&$-.*&*0+,quot;
!quot;#$quot;%&'(%&)quot;*quot;+%,-&.#&
!quot;#$%&'quot;(&$quot;)*+&*,+-./%#quot;$0++1++2&3.+:<
!(/01$+$.(#&+#2&3(,.quot;$4
3#..*quot;.5../678&#9&#,7.,%
5+%6+%2&7#.6quot;%*.$4