Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments最新文献_第2页

HeteroVisor: Exploiting Resource Heterogeneity to Enhance the Elasticity of Cloud Platforms 异构化:利用资源异构性增强云平台的弹性

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731191

Vishal Gupta, Min Lee, K. Schwan

{"title":"HeteroVisor: Exploiting Resource Heterogeneity to Enhance the Elasticity of Cloud Platforms","authors":"Vishal Gupta, Min Lee, K. Schwan","doi":"10.1145/2731186.2731191","DOIUrl":"https://doi.org/10.1145/2731186.2731191","url":null,"abstract":"This paper presents HeteroVisor, a heterogeneity-aware hypervisor, that exploits resource heterogeneity to enhance the elasticity of cloud systems. Introducing the notion of 'elasticity' (E) states, HeteroVisor permits applications to manage their changes in resource requirements as state transitions that implicitly move their execution among heterogeneous platform components. Masking the details of platform heterogeneity from virtual machines, the E-state abstraction allows applications to adapt their resource usage in a fine-grained manner via VM-specific 'elasticity drivers' encoding VM-desired policies. The approach is explored for the heterogeneous processor and memory subsystems evolving for modern server platforms, leading to mechanisms that can manage these heterogeneous resources dynamically and as required by the different VMs being run. HeteroVisor is implemented for the Xen hypervisor, with mechanisms that go beyond core scaling to also deal with memory resources, via the online detection of hot memory pages and transparent page migration. Evaluation on an emulated heterogeneous platform uses workload traces from real-world data, demonstrating the ability to provide high on-demand performance while also reducing resource usage for these workloads.","PeriodicalId":186972,"journal":{"name":"Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124944084","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 28

AppSec: A Safe Execution Environment for Security Sensitive Applications AppSec:对安全性敏感的应用程序的安全执行环境

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731199

Jianbao Ren, Yong Qi, Yue-hua Dai, Xiaoguang Wang, Yi Shi

{"title":"AppSec: A Safe Execution Environment for Security Sensitive Applications","authors":"Jianbao Ren, Yong Qi, Yue-hua Dai, Xiaoguang Wang, Yi Shi","doi":"10.1145/2731186.2731199","DOIUrl":"https://doi.org/10.1145/2731186.2731199","url":null,"abstract":"Malicious OS kernel can easily access user's private data in main memory and pries human-machine interaction data, even one that employs privacy enforcement based on application level or OS level. This paper introduces AppSec, a hypervisor-based safe execution environment, to protect both the memory data and human-machine interaction data of security sensitive applications from the untrusted OS transparently. AppSec provides several security mechanisms on an untrusted OS. AppSec introduces a safe loader to check the code integrity of application and dynamic shared objects. During runtime, AppSec protects application and dynamic shared objects from being modified and verifies kernel memory accesses according to application's intention. AppSec provides a devices isolation mechanism to prevent the human-machine interaction devices being accessed by compromised kernel. On top of that, AppSec further provides a privileged-based window system to protect application's X resources. The major advantages of AppSec are threefold. First, AppSec verifies and protects all dynamic shared objects during runtime. Second, AppSec mediates kernel memory access according to application's intention but not encrypts all application's data roughly. Third, AppSec provides a trusted I/O path from end-user to application. A prototype of AppSec is implemented and shows that AppSec is efficient and practical.","PeriodicalId":186972,"journal":{"name":"Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"1231 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134546000","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

Hardware-Assisted Secure Resource Accounting under a Vulnerable Hypervisor 易受攻击管理程序下的硬件辅助安全资源核算

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731203

Seongwook Jin, Jinho Seol, Jaehyuk Huh, S. Maeng

{"title":"Hardware-Assisted Secure Resource Accounting under a Vulnerable Hypervisor","authors":"Seongwook Jin, Jinho Seol, Jaehyuk Huh, S. Maeng","doi":"10.1145/2731186.2731203","DOIUrl":"https://doi.org/10.1145/2731186.2731203","url":null,"abstract":"With the proliferation of cloud computing to outsource computation in remote servers, the accountability of computational resources has emerged as an important new challenge for both cloud users and providers. Among the cloud resources, CPU and memory are difficult to verify their actual allocation, since the current virtualization techniques attempt to hide the discrepancy between physical and virtual allocations for the two resources. This paper proposes an online verifiable resource accounting technique for CPU and memory allocation for cloud computing. Unlike prior approaches for cloud resource accounting, the proposed accounting mechanism, called Hardware-assisted Resource Accounting (HRA), uses the hardware support for system management mode (SMM) and virtualization to provide secure resource accounting, even if the hypervisor is compromised. Using a secure isolated execution support of SMM, this study investigates two aspects of verifiable resource accounting for cloud systems. First, this paper presents how the hardware-assisted SMM and virtualization techniques can be used to implement the secure resource accounting mechanism even under a compromised hypervisor. Second, the paper investigates a sample-based resource accounting technique to minimize performance overheads. Using a statistical random sampling method, the technique estimates the overall CPU and memory allocation status with 99%~100% accuracies and performance degradations of 0.1%~0.5%.","PeriodicalId":186972,"journal":{"name":"Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"54 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127293042","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

Supporting High Performance Molecular Dynamics in Virtualized Clusters using IOMMU, SR-IOV, and GPUDirect 使用IOMMU、SR-IOV和GPUDirect支持虚拟化集群中的高性能分子动力学

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731194

A. Younge, J. Walters, S. Crago, Geoffrey Fox

引用次数: 12

A-DRM: Architecture-aware Distributed Resource Management of Virtualized Clusters A-DRM:虚拟化集群的架构感知分布式资源管理

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731202

Hui Wang, C. Isci, Lavanya Subramanian, Jongmoo Choi, D. Qian, O. Mutlu

{"title":"A-DRM: Architecture-aware Distributed Resource Management of Virtualized Clusters","authors":"Hui Wang, C. Isci, Lavanya Subramanian, Jongmoo Choi, D. Qian, O. Mutlu","doi":"10.1145/2731186.2731202","DOIUrl":"https://doi.org/10.1145/2731186.2731202","url":null,"abstract":"Virtualization technologies has been widely adopted by large-scale cloud computing platforms. These virtualized systems employ distributed resource management (DRM) to achieve high resource utilization and energy savings by dynamically migrating and consolidating virtual machines. DRM schemes usually use operating-system-level metrics, such as CPU utilization, memory capacity demand and I/O utilization, to detect and balance resource contention. However, they are oblivious to microarchitecture-level resource interference (e.g., memory bandwidth contention between different VMs running on a host), which is currently not exposed to the operating system. We observe that the lack of visibility into microarchitecture-level resource interference significantly impacts the performance of virtualized systems. Motivated by this observation, we propose a novel architecture-aware DRM scheme (ADRM), that takes into account microarchitecture-level resource interference when making migration decisions in a virtualized cluster. ADRM makes use of three core techniques: 1) a profiler to monitor the microarchitecture-level resource usage behavior online for each physical host, 2) a memory bandwidth interference model to assess the interference degree among virtual machines on a host, and 3) a cost-benefit analysis to determine a candidate virtual machine and a host for migration. Real system experiments on thirty randomly selected combinations of applications from the CPU2006, PARSEC, STREAM, NAS Parallel Benchmark suites in a four-host virtualized cluster show that ADRM can improve performance by up to 26.55%, with an average of 9.67%, compared to traditional DRM schemes that lack visibility into microarchitecture-level resource utilization and contention.","PeriodicalId":186972,"journal":{"name":"Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124460211","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 34

Exploring VM Introspection: Techniques and Trade-offs 探索VM自省:技术和权衡

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731196

Sahil Suneja, C. Isci, E. D. Lara, Vasanth Bala

引用次数: 37

GPUswap: Enabling Oversubscription of GPU Memory through Transparent Swapping GPUswap:通过透明交换开启GPU内存超订阅功能

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2015-03-14 DOI: 10.1145/2731186.2731192

Jens Kehne, Jonathan Metter, Frank Bellosa

{"title":"GPUswap: Enabling Oversubscription of GPU Memory through Transparent Swapping","authors":"Jens Kehne, Jonathan Metter, Frank Bellosa","doi":"10.1145/2731186.2731192","DOIUrl":"https://doi.org/10.1145/2731186.2731192","url":null,"abstract":"Over the last few years, GPUs have been finding their way into cloud computing platforms, allowing users to benefit from the performance of GPUs at low cost. However, a large portion of the cloud's cost advantage traditionally stems from oversubscription: Cloud providers rent out more resources to their customers than are actually available, expecting that the customers will not actually use all of the promised resources. For GPU memory, this oversubscription is difficult due to the lack of support for demand paging in current GPUs. Therefore, recent approaches to enabling oversubscription of GPU memory resort to software scheduling of GPU kernels -- which has been shown to induce significant runtime overhead in applications even if sufficient GPU memory is available -- to ensure that data is present on the GPU when referenced. In this paper, we present GPUswap, a novel approach to enabling oversubscription of GPU memory that does not rely on software scheduling of GPU kernels. GPUswap uses the GPU's ability to access system RAM directly to extend the GPU's own memory. To that end, GPUswap transparently relocates data from the GPU to system RAM in response to memory pressure. GPUswap ensures that all data is permanently accessible to the GPU and thus allows applications to submit commands to the GPU directly at any time, without the need for software scheduling. Experiments with our prototype implementation show that GPU applications can still execute even with only 20 MB of GPU memory available. In addition, while software scheduling suffers from permanent overhead even with sufficient GPU memory available, our approach executes GPU applications with native performance.","PeriodicalId":186972,"journal":{"name":"Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129633966","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 38

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments 第11届ACM SIGPLAN/SIGOPS虚拟执行环境国际会议论文集

Proceedings of the 11th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 1900-01-01 DOI: 10.1145/2731186

Ada Gavrilovska, Angela Demke Brown, B. Steensgaard

引用次数: 1