arrow
Return

CloudVMI: A Cloud-Oriented Writable Virtual Machine Introspection

delete2017-01-01
delete5
delete
OA
AI
羌
羌卫中 (Weizhong Qiang)
G
Gongping Xu
代
代炜琦 (Weiqi Dai) *
D
Deqing Zou
金
金海 (Hai Jin)
DOI:10.1109/ACCESS.2017.2758356delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
IoT generates considerable amounts of data, which often requires leveraging cloud computing to effectively scale the costs of transferring and computing these data. The concern regarding cloud security is more severe because many devices are connected to the cloud. It is important to automatically monitor and control these resources and services to efficiently and securely deliver cloud computing. The writable virtual machine introspection (VMI) technique can not only detect the runtime state of a guest VM from the outside but also update the state from the outside without any need for administrator efforts. Thus, the writable VMI technique can provide the benefit of high automation, which is helpful for automated cloud management. However, the existing writable VMI technique produces high overhead, fails to monitor the VMs distributed on different host nodes, and fails to monitor multiple VMs with heterogeneous guest OSes within a cloud; therefore, it cannot be applied for automated and centralized cloud management. In this paper, we present CloudVMI, which is a writable and cross-node monitoring VMI framework that can overcome the aforementioned issues. CloudVMI solves the semantic gap problem by redirecting the critical execution of system calls issued by the VMI program into the monitored VM. It has strong practicability by allowing one introspection program to inspect heterogeneous guest OSes and to monitor VMs distributed on remote host nodes. Thus, CloudVMI can be directly applied for automated and centralized cloud management. Moreover, we implement some defensive measures to secure CloudVMI itself. To highlight the writable capability and practical usefulness of CloudVMI, we implement four applications based on CloudVMI. CloudVMI is designed, implemented, and systematically evaluated. The experimental results demonstrate that CloudVMI is effective and practical for cloud management and that its performance overhead is acceptable compared with existing VMI systems.
Keywords:
Virtual machine introspection
cloud management
security monitoring
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Access cover
IEEE Access
IF:
3.6
Papers:
9.8W
Citations:
29.4W

Organization

No organization information available
Cited Papers

Cited Papers

Karyotype modifications in human malignant melanoma cell cultures after treatment with azelaic acid
err1993-07-01
err0
PREAI
errP. Grammatico; S. Scarpa; M. Picardo; K. Steindl; M. Nazzaro-Porro; G. Del Porto
errShare
errSave
Distillation of Quantum Steering
err2020-03-26
err0
errOAAI
errR. V. Nery; M. M. Taddei; P. Sahium; S. P. Walborn; L. Aolita; G. H. Aguilar
errShare
errSave
Intrusion detection techniques in cloud environment: A survey
err2017-01-01
err155
PREAI
errMishra, Preeti; Pilli, Emmanuel S.; Varadharajan, Vijay; Tupakula, Udaya
errShare
errSave
errShare
errSave
Blastic Plasmacytoid Dendritic Cell Neoplasm: State of the Art and Prospects
err2019-04-28
err0
errOAAI
errMaria Rosaria Sapienza; Alessandro Pileri; Enrico Derenzini; Federica Melle; Giovanna Motta; Stefano Fiori; Angelica Calleri; Nicola Pimpinelli; Valentina Tabanelli; Stefano Pileri
errShare
errSave
Synthesis and Gas-Transport Properties of Metathesis Polytricyclononenes Bearing Three Me3 Si Groups per Monomer Unit
err2016-07-20
err0
PREAI
errPavel Chapala; Maxim Bermeshev; Ludmila Starannikova; Ilya Borisov; Viktor Shantarovich; Valentin Lakhtin; Vladimir Volkov; Eugene Finkelshtein
errShare
errSave
researcher View more