From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1HgfQN-0006NN-SS for qemu-devel@nongnu.org; Wed, 25 Apr 2007 07:12:39 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1HgfQL-0006NB-GC for qemu-devel@nongnu.org; Wed, 25 Apr 2007 07:12:38 -0400 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1HgfQL-0006N8-Aw for qemu-devel@nongnu.org; Wed, 25 Apr 2007 07:12:37 -0400 Received: from warsl404pip5.highway.telekom.at ([195.3.96.77] helo=email.aon.at) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1HgfKi-0001BV-Gf for qemu-devel@nongnu.org; Wed, 25 Apr 2007 07:06:48 -0400 Received: from m721p000.adsl.highway.telekom.at (HELO [192.168.1.4]) ([62.47.250.0]) (envelope-sender ) by smarthub78.highway.telekom.at (qmail-ldap-1.03) with SMTP for ; 25 Apr 2007 11:06:44 -0000 Subject: Re: [Qemu-devel] Minos-type integrity checking in QEMU From: maestro In-Reply-To: <12835c8f0704250116i15a82885j7f6311715ad4374b@mail.gmail.com> References: <12835c8f0704250116i15a82885j7f6311715ad4374b@mail.gmail.com> Content-Type: text/plain Date: Wed, 25 Apr 2007 13:06:43 +0200 Message-Id: <1177499203.4001.12.camel@localhost.localdomain> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Hello Shashi! you might wanna take a look at the argos [0] project. they do exactly that kind of stuff. we implemented something quite similar as the base of my masters thesis a technical report is available at [1] although what you need is only covered in a single chapter. btw. i found it to be easier to make the changes in translate.c instead of changing every op in op.c cheers m. [0] http://www.few.vu.nl/argos/ [1] http://seclab.tuwien.ac.at/papers/tqana.pdf Am Mittwoch, den 25.04.2007, 01:16 -0700 schrieb Shashidhar Mysore: > Hi, > > I am trying to incorporate into QEMU (x86) some structures to maintain > integrity of data that flows in the processor. Specifically, I want to > maintain a bit for every physical memory address and transfer the > state information for every address along onto the virtual memory, and > also down to the instructions which operate on data, and bit arrays > for registers (so that when an operand is fetched from a particular > register, we also have the state information for that register). I am > trying to build a Minos type architecture > ( http://minos.cs.ucdavis.edu/) but in QEMU instead of Bochs. > > For this, as far as I can see, I need to maintain a set of new > structures to shadow the physical memory and make changes to the micro > ops defined in target-i386/op.c so that every instruction can track > the state and store them for every register used as an operand. I'm > not sure if somebody has already implemented such a system on QEMU? I > am just beginning to think and work on this, so any > pointers/suggestions would be greatly appreciated. Please let me know > your views on this. > > Thanks, > -Shashi.