Abstract:IoT generates considerable amounts of data, which often requires leveraging cloud computing to effectively scale the costs of transferring and computing these data. The concern regarding cloud security is more severe because many devices are connected to the cloud. It is important to automatically monitor and control these resources and services to efficiently and securely deliver cloud computing. The writable virtual machine introspection (VMI) technique can not only detect the runtime state of a guest VM from the outside but also update the state from the outside without any need for administrator efforts. Thus, the writable VMI technique can provide the benefit of high automation, which is helpful for automated cloud management. However, the existing writable VMI technique produces high overhead, fails to monitor the VMs distributed on different host nodes, and fails to monitor multiple VMs with heterogeneous guest OSes within a cloud; therefore, it cannot be applied for automated and centralized cloud management. In this paper, we present CloudVMI, which is a writable and crossnode monitoring VMI framework that can overcome the aforementioned issues. CloudVMI solves the semantic gap problem by redirecting the critical execution of system calls issued by the VMI program into the monitored VM. It has strong practicability by allowing one introspection program to inspect heterogeneous guest OSes and to monitor VMs distributed on remote host nodes. Thus, CloudVMI can be directly applied for automated and centralized cloud management. Moreover, we implement some defensive measures to secure CloudVMI itself. To highlight the writable capability and practical usefulness of CloudVMI, we implement four applications based on CloudVMI. CloudVMI is designed, implemented, and systematically evaluated. The experimental results demonstrate that CloudVMI is effective and practical for cloud management and that its performance overhead is acceptable compared with existing VMI systems.

A Low Overhead and Reliable Nested Virtualization VMM for Cloud Computing

Nosv: A Lightweight Nested-Virtualization VMM for Hosting High Performance Computing on Cloud.

A Lightweight VMM on Many Core for High Performance Computing

NestCloud: Towards Practical Nested Virtualization

Performance Measuring and Comparing of Virtual Machine Monitors

Design and Verification of a Lightweight Reliable Virtual Machine Monitor for a Many-Core Architecture.

Analyzing & modeling the performance in Xen-based virtual cluster environment

Pcanel/V2: A VMM Architecture Based on Intel VT-x

Performance-Monitoring-Based Traffic-Aware Virtual Machine Deployment on NUMA Systems

An Efficient and Transparent Approach for Adaptive Intra-and Inter-Node Virtual Machine Communication in Virtualized Clouds.

An Approach To Implementing The Nic Virtualization By The Hybrids Of Single System Image And Hardware-Assisted Virtualization Technologies

Who Is Your Neighbor: Net I/O Performance Interference in Virtualized Clouds

Vmon: An Efficient Out-Of-Vm Process Monitor For Virtual Machines

HV2M: A Novel Approach to Boost Inter-Vm Network Performance for Xen-based HVMs

A modeling of network I/O efficiency in Xen virtualized clouds

PVM: Efficient Shadow Paging for Deploying Secure Containers in Cloud-native Environment.

VON/KVM: A high performance virtual overlay network integrated with KVM

CloudVMI: A Cloud-Oriented Writable Virtual Machine Introspection

HVSM: an In-OutVM Security Monitoring Architecture in IAAS Cloud

Cloudvisor: Retrofitting Protection Of Virtual Machines In Multi-Tenant Cloud With Nested Virtualization

VMSA: a Performance Preserving Online VM Splitting and Placement Algorithm in Dynamic Cloud Environments.