240 Cyber seCurity essentiAls
One solution to this problem for a VMM is to move the guest OS’
GDT and LDT to a different location than would normally be used.
is prevents the host machine’s operating system’s GDT and LDT
tables from being overwritten by the guest OS. Since most operating
systems expect to be the only operating system present on a computer
at one time, operating systems have a very specific location for their
GDT and LDT tables. When the VMM moves the guest OS’ GDT
and LDT to a new memory location, an inconsistency between the
VME and a real machine exists. From this inconsistency, applications
can determine the presence of a VME. e Scooby Doo package can
reliably determine the presence of a VME using this method.
e x86 arch ...