2026-06-10T09:47:03.569Z http://ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai

ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai:2:1965 2014-03-04T19:19:49Z 2

VIRTUAL MACHINE INTROSPECTION IN DIGITAL FORENSICS 2010 343.983:004.896 http://ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai/record/2/1965 file:///C:/Users/anjegus.US/Downloads/SR%20-%20Virtuelna%20ma%C5%A1inska%20introspekcija%20u%20digitalnoj%20forenzici%20(1).pdf G. Grubor A. NJeguš The server and client side virtualization increase evry day. Some features of virtuelization have unreturned consequences for information security. It is necessary to undarstand all treats to phisical systems and some new types of risk, unique to virtual systems only. Virtual machine introspection (VMI) technique includes a method of monitoring and virtual machine (VM) state analysis from the virtual machine monitor (VMM) or hypervisor level. Some VMI properties, such as isolation, investigation and interception, are appropriate for security applications and applied in intrussion detection and prevention systems. VM retains malware programs and prevents their intrusion into host operation system (OS). In this piece of paper some potential VMI applications in digital forensic such as digital forensic testbed, backup and data recovery in virtual environment, live forensic, VMI as a forensoc tool and VMI as antiforensic technique are considered in detail. article 7 1 79 92 1820-8819 Singidunum revija