Abstract:For the ability to explore the memory's fullest potential, memory de-duplication has been widely experimented with in current main stream virtualization platforms. A lot of work has been done to improve the efficiency of memory de-duplication, while too little attention was paid to the introduced security issues which have been proved by prior work. To deal with this security risk and efficiently manage the memory we start our work in this paper. We first conduct extensive experiments on different OS platforms to study the realistic situation of page sharing. By analyzing the results we find: 1) Page sharing is contributed mostly by self-sharing (nearly 90%), and the self-sharing rate varies significantly between Linux and Windows OS platforms. Compared with self-sharing the inter-VM sharing rate is extremely low, under 1% in most cases. 2) Page size has a larger influence on Linux platform than Windows platform, so sub-page de-duplication proposed in prior work may achieve better performance on Linux platform. On the basis of above findings we propose a group-based secure page sharing model (or GSKSM), in which we consider both VM processes and normal processes. We have successfully implemented it in Linux kernel 3.6.6, and the experiment results show it works well with negligible overhead. Finally based on GSKSM we further present an efficient memory management approach (or SEMMA), which combines GSKSM and balloon technique to efficiently manage the memory, and the preliminary experiment result is satisfactory.

Security of OS-level virtualization technologies: Technical report

Design and Implementation of SecPod, A Framework for Virtualization-Based Security Systems.

On the effectiveness of virtualization-based security

Research on Security Techniques Based on System Virtualization

The study and evaluation of ARM-based mobile virtualization

Virtual machine security challenges: case studies

Research about Virtualization of ARM-Based Mobile Smart Devices

SeVMM: VMM-Based Security Control Model

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING

The Application of Virtual Machines on System Security

A Think on Security and Trusty Measurement for Virtualized Environment

Trusted Computing Base Using Virtualization Platform

A Survey on Security Challenges of Virtualization Technology in Cloud Computing

Virtualizing mixed-criticality systems: A survey on industrial trends and issues

Analysing Virtual Machine Security in Cloud Systems

Explore Xen Security Mechanism

SEMMA: Secure Efficient Memory Management Approach in Virtual Environment.

A Survey of Unikernel Security: Insights and Trends from a Quantitative Analysis

Analysis of a Secure Virtual Desktop Infrastructure System

A Novel Agent-Based Framework in Bridge-Mode Hypervisors of Cloud Security.

Virtual Switching Without a Hypervisor for a More Secure Cloud