Fuzzing Virtual Machine Monitors for Improved Security
Delia-Maria Pavel, Andreea Florescu, Costin Carabaș, Nicolae Ţăpuş · 2023
rust-vmm is a collection of building blocks that allows the creation of custom Virtual Machine Monitors, which import only the required features. One of the components of rust-vmm is Virtio. Virtio is a standardized layer between guest and host that facilitates their communication. It is a central part of a Virtual Machine Monitor and a surface prone to attacks because input comes from untrusted parties. This project proposes a way of detecting possible vulnerabilities in the Virtio device implementation from rust-vmm/vm-virtio using fuzzing. For this purpose, we will create a complete fuzzing toolchain and thoroughly test the existing components of rust-vmm.