

Joanna Rutkowska
Blue Pill
Hypervisor rootkits and Qubes OS
Rating
88Impact score
Domains
RootkitsVirtualizationSecure OS design
Scouting report
Presented Blue Pill at Black Hat 2006, a rootkit that moved a running OS into a hypervisor beneath it, and coined the Evil Maid attack for machines left unattended. Then built the answer: Qubes OS, a desktop that assumes compromise and isolates by compartment.
Curator’s note
Broke the platform, then shipped a better one. Very few do both.
Sources
- 01Joanna Rutkowska en.wikipedia.org
- 02Blue Pill en.wikipedia.org
- 03Qubes OS qubes-os.org