Virtualization detection based on data fusion

Characteristic analysis and timing analysis are two methods for virtualization detection. However, the accuracy of characteristic analysis is low and the timing analysis is not efficient. Moreover, current methods based on timing analysis make use of the privileged instructions separately without data fusion and the accuracy of timing analysis can be improved further. In this paper, we introduce a new method in timing analysis based on data fusion to improve the accuracy of virtualization detection. Our method combines characteristic analysis and timing analysis, which makes virtualization detection more efficient. A virtualization detection tool is implemented and several experiments are made. The results show that our method is both effective and efficient.