TY - GEN
T1 - Dynamic VM Dependability Monitoring Using Hypervisor Probes
AU - Estrada, Zachary J.
AU - Pham, Cuong
AU - Deng, Fei
AU - Kalbarczyk, Zbigniew
AU - Iyer, Ravishankar K.
AU - Yan, Lok
N1 - Funding Information:
The authors wish to thank Mika Latimer for help in automated migration between kernel versions. This material is based upon work supported in part by the National Science Foundation under Grant No. CNS 10-18503 CISE, by the Army Research Office under Award No. W911NF-13-1-0086, by the National Security Agency under Award No. H98230-14-C-0141, by the Air Force Research Laboratory and the Air Force Office of Scientific Research under agreement No. FA8750-11-2-0084, by the Department of Energy under Award Number DE-OE0000097, by an IBM faculty award, and by Infosys Corporation.
Publisher Copyright:
© 2015 IEEE.
PY - 2016/1/4
Y1 - 2016/1/4
N2 - Many current VM monitoring approaches require guest OS modifications and are also unable to perform application level monitoring, reducing their value in a cloud setting. This paper introduces hprobes, a framework that allows one to dynamically monitor applications and operating systems inside a VM. The hprobe framework does not require any changes to the guest OS, which avoids the tight coupling of monitoring with its target. Furthermore, the monitors can be customized and enabled/disabled while the VM is running. To demonstrate the usefulness of this framework, we present three sample detectors: an emergency detector for a security vulnerability, an application watchdog, and an infinite-loop detector. We test our detectors on real applications and demonstrate that those detectors achieve an acceptable level of performance overhead with a high degree of flexibility.
AB - Many current VM monitoring approaches require guest OS modifications and are also unable to perform application level monitoring, reducing their value in a cloud setting. This paper introduces hprobes, a framework that allows one to dynamically monitor applications and operating systems inside a VM. The hprobe framework does not require any changes to the guest OS, which avoids the tight coupling of monitoring with its target. Furthermore, the monitors can be customized and enabled/disabled while the VM is running. To demonstrate the usefulness of this framework, we present three sample detectors: an emergency detector for a security vulnerability, an application watchdog, and an infinite-loop detector. We test our detectors on real applications and demonstrate that those detectors achieve an acceptable level of performance overhead with a high degree of flexibility.
KW - Computer Security
KW - Fault diagnosis
KW - Platform virtualization
KW - Reliability
KW - Virtual machine monitors
UR - http://www.scopus.com/inward/record.url?scp=84966440607&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84966440607&partnerID=8YFLogxK
U2 - 10.1109/EDCC.2015.9
DO - 10.1109/EDCC.2015.9
M3 - Conference contribution
AN - SCOPUS:84966440607
T3 - Proceedings - 2015 11th European Dependable Computing Conference, EDCC 2015
SP - 61
EP - 72
BT - Proceedings - 2015 11th European Dependable Computing Conference, EDCC 2015
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 11th European Dependable Computing Conference, EDCC 2015
Y2 - 7 September 2015 through 11 September 2015
ER -