Visible to the public Dynamic VM Dependability Monitoring Using Hypervisor ProbesConflict Detection Enabled

TitleDynamic VM Dependability Monitoring Using Hypervisor Probes
Publication TypeConference Paper
Year of Publication2015
AuthorsZachary J. Estrada, University of Illinois at Urbana-Champaign, Cuong Pham, University of Illinois at Urbana-Champaign, Fei Deng, University of Illinois at Urbana-Champaign, Zbigniew Kalbarczyk, University of Illinois at Urbana-Champaign, Ravishankar K. Iyer, University of Illinois at Urbana-Champaign, Lok Yan, Air Force Research Laboratory
Conference Name11th European Dependable Computing Conference- Dependability in Practice (EDCC 2015)
PublisherIEEE Computer Society
Conference LocationParis, France
Keywordscomputer security, Data Driven Security Models and Analysis, fault diagnosis, NSA SoS Lablets Materials, Platform virtualization, reliability, science of security, UIUC, Virtual machine monitors
Abstract

Many current VM monitoring approaches require guest OS modifications and are also unable to perform application level monitoring, reducing their value in a cloud setting. This paper introduces hprobes, a framework that allows one to dynamically monitor applications and operating systems inside a VM. The hprobe framework does not require any changes to the guest OS, which avoids the tight coupling of monitoring with its target. Furthermore, the monitors can be customized and enabled/disabled while the VM is running. To demonstrate the usefulness of this framework, we present three sample detectors: an emergency detector for a security vulnerability, an application watchdog, and an infinite-loop detector. We test our detectors on real applications and demonstrate that those detectors achieve an acceptable level of performance overhead with a high degree of flexibility.

URLhttp://publish.illinois.edu/science-of-security-lablet/files/2014/05/Dynamic-VM-Dependability-Monito...
Citation Keynode-23298

Other available formats:

Dynamic VM Dependability Monitoring Using Hypervisor Probes
AttachmentSize
bytes