Abstract:Recently, virtualization technologies have been widely used in industry. In order to monitor the security of target systems in virtualization environments, conventional methods usually put the security monitoring mechanism into the normal functionality of the target systems. However, these methods are either prone to be tempered by attackers or introduce considerable performance overhead for target systems. To address these problems, in this paper, we present a concurrent security monitoring method which decouples traditional serial mechanisms, including security event collector and analyzer, into two concurrent components. On one hand, we utilize the SIM framework to deploy the event collector into the target virtual machine. On the other hand, we combine the virtualization technology and multi-core technology to put the event analyzer into a trusted execution environment. To address the synchronization problem between these two concurrent components, we make use of Lamport's ring buffer algorithm. Based on the Xen hypervisor, we have implemented a prototype system named COMO. The experimental results show that COMO can monitor the security of the target virtual machine concurrently within a little performance overhead.

An Integrated Runtime Monitoring Method for Internet-Based Virtual Computing Environment.

Performance Measuring and Comparing of Virtual Machine Monitors

Information Monitor Research Oriented to Complex Virtual Test Supporting Environment

A Comprehensive Monitoring Framework for Virtual Computing Environment

Awareness scheduling and algorithm implementation for collaborative virtual environment

A Framework to Evaluate and Predict Performances in Virtual Machines Environment

Performance Combinative Evaluation of Typical Virtual Machine Monitors

Multi-Core Virtual Machine Monitoring System

A RUNTIME MONITORING METHOD FOR COMPOSITE WEB SERVICES

Assessment and Evaluation of Internet-Based Virtual Computing Infrastructure.

Information Monitor Research in Virtual Testing System Based on VMIC

A VIRTUAL MACHINE BASED SECURITY MONITORING SCHEME

Virtualization-Based Security Monitoring

A Runtime Model Based Monitoring Approach for Cloud

A Concurrent Security Monitoring Method for Virtualization Environments

Towards evaluating holistic runtime state based on change vector analysis

Research and Realization of I/O Monitoring Based on Xen Cloud Platform

Requirements Monitoring for Internetware: an Interaction Based Approach

Internet Service Monitoring - Icmp Based Solution

An In-VM Measuring Framework for Increasing Virtual Machine Security in Clouds

Research and Implementation of a Virtual Test Object Real-Time Running Control Mechanism