USING HARDWARE ISOLATION MECHANISMS AS A PLATFORM FOR ADAPTIVE SECURITY
Abstract
Ensuring information security of critical systems in the context of evolving cyber threats necessitates a transition to adaptive protection systems based on architecturally resilient solutions. This paper presents a comprehensive security architecture that integrates hardware virtualization mechanisms of MIPS64-V4 and IOMMU technology with a processor hardware signature monitoring system to create a multi-layered defense system. The research develops a multi-level security model where MIPS64-V4 hardware virtualization provides isolation of computational environments through guest execution modes and shadow registers, while IOMMU technology guarantees protection against unauthorized access through peripheral devices. Particular attention is paid to a systematic approach to organizing adaptive security, combining preventive isolation mechanisms with active monitoring of processor microarchitectural characteristics. The central element of the work is the methodology for using MIPS processor hardware performance counters to detect anomalous activity. The proposed system for correlation analysis of hardware events enables identification of complex cyber attacks, including ROP/JOP attacks and side-channel attacks, through monitoring of branch prediction characteristics, cache misses, and violations in the virtual memory subsystem. The key research outcome is the integration of hardware virtualization mechanisms with an adaptive monitoring system, implementing a closed security cycle: continuous monitoring → anomaly detection → isolation and recovery → adaptation. A three-level system architecture has been developed, comprising stages of data collection, preprocessing, and correlation analysis with dynamic reconfiguration of protection mechanisms. The theoretical principles and architectural solutions presented in the paper form the basis for creating next-generation trusted computing platforms and open prospects for further research in the field of hardware-oriented cybersecurity.
Fields of Study & Subjects
Security and Verification in Computing
Network Security and Intrusion Detection
Real-Time Systems Scheduling
Publication details
- Journal / source
- Bezopasnost informacionnyh tehnology
- Volume
- 33
- Issue
- 1
- Publication date
- 1 February 2026
- Language
- EN