Mitigate Baron SameEdit (CVE-2021-3156) vulnerability

DLT AMI Installation

DLT is a company focused on accelerating public sector growth for technology companies in the federal, state and local, education, utilities and healthcare markets. Polyverse has partnered with DLT in order to bring Polymorphing to your AWS cloud infrastructure.

DLT offers an AMI on the Amazon Marketplace that installs Polymorphing for Linux automatically. You can use this link to subscribe, or add it to your list of AMIs:

Cybersecurity as a Service: Polyverse Protected Ubuntu 16.04


Your instance will need to be launched with access to the internet. If you enable internet access later, Polymorphing for Linux will fail to install, and you'll need to terminate, and re-instantiate the instance with internet access.

There are many ways to configure internet access for your instance. For example, if you're on a VPC with a public subnet, you'll need to assign your instance a public IP. An elastic IP assigned later will cause the installation to fail.


You can launch an EC2 instance using an AMI with the instructions linked to below:

Launching an AWS Marketplace Instance

You can search for "Polyverse" in order to find the appropriate AMI.

Configure your instance using the following steps:

  1. Launch the AMI in a VPC and Subnet which HAS ACCESS TO THE INTERNET. Polyverse Protected Ubuntu must have access to the internet to install the polymorphic packages from the Polyverse scrambled binary repository.
  2. Create or select an existing EC2 Security Group which will allow access on port 22/tcp.
  3. Create a new, or select an existing key pair.
  4. After the instance launches, the polymorphic packages will be installed on your new instance, and a reboot will be required upon completion (typically 10-15 minutes).

Accessing Your Instance

There are several ways of accessing your instance, including SSH and AWS Systems Manager Session Manager. If you'd like to SSH into your instance, you'll need to use the username "ubuntu", and the hostname or IP address of your instance.

As an example, if you're using a .pem for authentication, you'd use something like this:

ssh -i "~/keys/my_key.pem" ubuntu@<your-hostname-here>


You have two ways of verifying that Polymorphing for Linux has been installed on your instance:

  1. Use the following command to see if Polyverse's repositories have been added to your sources.list file:
    cat /etc/apt/sources.list | grep polyverse
    If that command returns anything, Polyverse's repositories have been added.
  2. Use the following command, also found in the verification section of the documentation, to verify where your binaries have been downloaded from:
    curl | sh -s list-installed-elf | grep polyverse
    If that command returns anything, Polymorphing for Linux has been successfully installed


Polyverse protects you by making the layout of your binaries in memory unpredictable. If you ever want to increase that unpredictability by downloading a new set of binaries with a different layout, we recompile and re-scramble binaries that have been downloaded every 24 hours. You can use the following command to download a new set:

curl | bash -s replace-installed-elf

Troubleshooting your instance

I went through the verification steps you listed, and didn't see any references to polyverse.

This probably means your instance didn't have access to the internet on launch. Terminate that instance, then launch another that's connected to a VPC and configured to allow internet access for your instance. You can read the Amazon documentation on VPCs here:

What username do I use for SSH access?

Use "ubuntu" as your username. Default usernames for all distros are listed here:

Troubleshooting Connecting to Your Instance

DLT Marketplace Support

If you have any questions or problems regarding your Polyverse Protected Ubuntu 16.04 AMI instances, you can contact DLT technical support here:

DLT Marketplace Support

Back to top

Stock AMI Installation

Installing Polymorphing in a stock AMI, or creating a custom Polymorphed AMI is easy. Just follow Amazon's instructions for creating a custom AMI, and during the customization step, install Polymorphing. You can find Amazon's instructions for creating a custom AMI here:

Using a custom Amazon machine image (AMI)

Follow the steps in Amazon's instructions, and when you get to step 10, install Polymorphing according to the instructions for your distro.

You can find instructions for installing Polymorphing here:


Verifying your installation works the same way as a normal Polymorphing installation. You can find instructions in the Verification section of our documentation.

Back to top

The registered trademark Linux® is used pursuant to a sublicense from the Linux Foundation, the exclusive licensee of Linus Torvalds, owner of the mark on a world­wide basis.