Dynamic VM Dependability Monitoring Using Hypervisor Probes
Title | Dynamic VM Dependability Monitoring Using Hypervisor Probes |
Publication Type | Conference Paper |
Year of Publication | 2015 |
Authors | Zachary J. Estrada, University of Illinois at Urbana-Champaign, Cuong Pham, University of Illinois at Urbana-Champaign, Fei Deng, University of Illinois at Urbana-Champaign, Zbigniew Kalbarczyk, University of Illinois at Urbana-Champaign, Ravishankar K. Iyer, University of Illinois at Urbana-Champaign, Lok Yan, Air Force Research Laboratory |
Conference Name | 11th European Dependable Computing Conference- Dependability in Practice (EDCC 2015) |
Publisher | IEEE Computer Society |
Conference Location | Paris, France |
Keywords | computer security, Data Driven Security Models and Analysis, fault diagnosis, NSA SoS Lablets Materials, Platform virtualization, reliability, science of security, UIUC, Virtual machine monitors |
Abstract | Many current VM monitoring approaches require guest OS modifications and are also unable to perform application level monitoring, reducing their value in a cloud setting. This paper introduces hprobes, a framework that allows one to dynamically monitor applications and operating systems inside a VM. The hprobe framework does not require any changes to the guest OS, which avoids the tight coupling of monitoring with its target. Furthermore, the monitors can be customized and enabled/disabled while the VM is running. To demonstrate the usefulness of this framework, we present three sample detectors: an emergency detector for a security vulnerability, an application watchdog, and an infinite-loop detector. We test our detectors on real applications and demonstrate that those detectors achieve an acceptable level of performance overhead with a high degree of flexibility. |
URL | http://publish.illinois.edu/science-of-security-lablet/files/2014/05/Dynamic-VM-Dependability-Monito... |
Citation Key | node-23298 |
Attachment | Size |
---|---|
bytes |