Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments最新文献

Secure guest virtual machine support in apparition 幻影中的安全来宾虚拟机支持

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313809

Ethan Johnson, Komail Dharsee, J. Criswell

引用次数: 1

Fast and live hypervisor replacement 快速和实时的hypervisor替换

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313821

Spoorti Doddamani, Piush K. Sinha, Hui Lu, Tsu-Hsiang K. Cheng, Hardik Bagdi, Kartik Gopalan

{"title":"Fast and live hypervisor replacement","authors":"Spoorti Doddamani, Piush K. Sinha, Hui Lu, Tsu-Hsiang K. Cheng, Hardik Bagdi, Kartik Gopalan","doi":"10.1145/3313808.3313821","DOIUrl":"https://doi.org/10.1145/3313808.3313821","url":null,"abstract":"Hypervisors are increasingly complex and must be often updated for applying security patches, bug fixes, and feature upgrades. However, in a virtualized cloud infrastructure, updates to an operational hypervisor can be highly disruptive. Before being updated, virtual machines (VMs) running on a hypervisor must be either migrated away or shut down, resulting in downtime, performance loss, and network overhead. We present a new technique, called HyperFresh, to transparently replace a hypervisor with a new updated instance without disrupting any running VMs. A thin shim layer, called the hyperplexor, performs live hypervisor replacement by remapping guest memory to a new updated hypervisor on the same machine. The hyperplexor leverages nested virtualization for hypervisor replacement while minimizing nesting overheads during normal execution. We present a prototype implementation of the hyperplexor on the KVM/QEMU platform that can perform live hypervisor replacement within 10ms. We also demonstrate how a hyperplexor-based approach can used for sub-second relocation of containers for live OS replacement.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126549355","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Dynamic application reconfiguration on heterogeneous hardware 异构硬件上的动态应用程序重新配置

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313819

J. Fumero, Michail Papadimitriou, Foivos S. Zakkak, Maria Xekalaki, James Clarkson, Christos Kotselidis

{"title":"Dynamic application reconfiguration on heterogeneous hardware","authors":"J. Fumero, Michail Papadimitriou, Foivos S. Zakkak, Maria Xekalaki, James Clarkson, Christos Kotselidis","doi":"10.1145/3313808.3313819","DOIUrl":"https://doi.org/10.1145/3313808.3313819","url":null,"abstract":"By utilizing diverse heterogeneous hardware resources, developers can significantly improve the performance of their applications. Currently, in order to determine which parts of an application suit a particular type of hardware accelerator better, an offline analysis that uses a priori knowledge of the target hardware configuration is necessary. To make matters worse, the above process has to be repeated every time the application or the hardware configuration changes. This paper introduces TornadoVM, a virtual machine capable of reconfiguring applications, at runtime, for hardware acceleration based on the currently available hardware resources. Through TornadoVM, we introduce a new level of compilation in which applications can benefit from heterogeneous hardware. We showcase the capabilities of TornadoVM by executing a complex computer vision application and six benchmarks on a heterogeneous system that includes a CPU, an FPGA, and a GPU. Our evaluation shows that by using dynamic reconfiguration, we achieve an average of 7.7× speedup over the statically-configured accelerated code.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115411558","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 30

ACRN: a big little hypervisor for IoT development ACRN:用于物联网开发的大型小型管理程序

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313816

Hao Li, Xuefei Xu, Jinkui Ren, Yaozu Dong

{"title":"ACRN: a big little hypervisor for IoT development","authors":"Hao Li, Xuefei Xu, Jinkui Ren, Yaozu Dong","doi":"10.1145/3313808.3313816","DOIUrl":"https://doi.org/10.1145/3313808.3313816","url":null,"abstract":"With the rapid growth of Internet of Things (IoT) and the new emerging IoT computing paradigm such as edge computing, it is prevalent to see that today’s real-time and functional safety devices, particularly in industrial IoT and automotive scenarios, are getting multi-functional by combining multiple platforms into single product. The new trend potentially prompts embedded virtualization as a promising solution in terms of workload consolidation, separation, and cost- effective. However, hypervisors, such as KVM and XEN, are designed to run on a server and can not be easily restructured to fulfill the requirements such as real-time constrains from IoT products. Meanwhile, existing embedded virtualization solutions are normally tailored towards specific IoT scenarios, which makes them hard to extend towards various scenarios. In addition, most commercial solutions are mature and appealing but expensive and closed-source. This paper presents ACRN, a flexible, lightweight, scalable, and open source embedded hypervisor for IoT development. By focusing on CPU and memory partitioning, and mean- while optionally offloading embedded I/O virtualization to a tiny user space device model, ACRN presents a consolidated system satisfying real-time and general-purpose needs simultaneously. By adopting customer-friendly permissive BSD license, ACRN provides a practical industry-grade solution with immediate readiness. In this paper we will de- scribe the design and implementation of ACRN, and conduct thorough evaluations to demonstrate its feasibility and effectiveness. The source code of ACRN has been released at https://github.com/projectacrn/acrn-hypervisor.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131309770","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 30

Cross-ISA machine instrumentation using fast and scalable dynamic binary translation 跨isa机器仪器使用快速和可扩展的动态二进制转换

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313811

E. G. Cota, L. Carloni

{"title":"Cross-ISA machine instrumentation using fast and scalable dynamic binary translation","authors":"E. G. Cota, L. Carloni","doi":"10.1145/3313808.3313811","DOIUrl":"https://doi.org/10.1145/3313808.3313811","url":null,"abstract":"The rise in instruction set architecture (ISA) diversity and the growing adoption of virtual machines are driving a need for fast, scalable, full-system, cross-ISA emulation and instrumentation tools. Unfortunately, achieving high performance for these cross-ISA tools is challenging due to dynamic binary translation (DBT) overhead and the complexity of instrumenting full-system emulators. In this paper we improve cross-ISA emulation and instrumentation performance through three novel techniques. First, we increase floating point (FP) emulation performance by observing that most FP operations can be correctly emulated by surrounding the use of the host FP unit with a minimal amount of non-FP code. Second, we introduce the design of a translator with a shared code cache that scales for multi-core guests, even when they generate translated code in parallel at a high rate. Third, we present an ISA-agnostic instrumentation layer that can instrument guest operations that occur outside of the DBT’s intermediate representation (IR), which are common in full-system emulators. We implement our approach in Qelt, a high-performance cross-ISA machine emulator and instrumentation tool based on QEMU. Our results show that Qelt scales to 32 cores when emulating a guest machine used for parallel compilation, which demonstrates scalable code translation. Furthermore, experiments based on SPEC06 show that Qelt (1) outperforms QEMU as a full-system cross-ISA machine emulator by 1.76×/2.18× for integer/FP workloads, (2) outperforms state-of-the-art, cross-ISA, full-system instrumentation tools by 1.5×-3×, and (3) can match the performance of Pin, a state-of-the-art, same-ISA DBI tool, when used for complex instrumentation such as cache simulation.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121516673","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

A binary-compatible unikernel 一个二进制兼容的单内核

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313817

Pierre Olivier, Daniel Chiba, Stefan Lankes, Changwoo Min, B. Ravindran

{"title":"A binary-compatible unikernel","authors":"Pierre Olivier, Daniel Chiba, Stefan Lankes, Changwoo Min, B. Ravindran","doi":"10.1145/3313808.3313817","DOIUrl":"https://doi.org/10.1145/3313808.3313817","url":null,"abstract":"Unikernels are minimal single-purpose virtual machines. They are highly popular in the research domain due to the benefits they provide. A barrier to their widespread adoption is the difficulty/impossibility to port existing applications to current unikernels. HermiTux is the first unikernel providing binary-compatibility with Linux applications. It is composed of a hypervisor and lightweight kernel layer emulating OS interfaces at load- and runtime in accordance with the Linux ABI. HermiTux relieves application developers from the burden of porting software, while providing unikernel benefits such as security through hardware-assisted virtualized isolation, swift boot time, and low disk/memory footprint. Fast system calls and kernel modularity are enabled through binary rewriting and analysis techniques, as well as shared library substitution. Compared to other unikernels, HermiTux boots faster and has a lower memory/disk footprint. We demonstrate that over a range of native C/C++/Fortran/Python Linux applications, HermiTux performs similarly to Linux in most cases: its performance overhead averages 3% in memory- and compute-bound scenarios.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"46 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126817301","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 52

The changing face of enterprise virtualization (keynote) 企业虚拟化的变化(主题演讲)

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3322436

Josh Simons

引用次数: 0

TEEv: virtualizing trusted execution environments on mobile platforms TEEv:在移动平台上虚拟化可信执行环境

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313810

Wenhao Li, Yubin Xia, Long Lu, Haibo Chen, B. Zang

{"title":"TEEv: virtualizing trusted execution environments on mobile platforms","authors":"Wenhao Li, Yubin Xia, Long Lu, Haibo Chen, B. Zang","doi":"10.1145/3313808.3313810","DOIUrl":"https://doi.org/10.1145/3313808.3313810","url":null,"abstract":"Trusted Execution Environments (TEE) are widely deployed, especially on smartphones. A recent trend in TEE development is the transition from vendor-controlled, single-purpose TEEs to open TEEs that host Trusted Applications (TAs) from multiple sources with independent tasks. This transition is expected to create a TA ecosystem needed for providing stronger and customized security to apps and OS running in the Rich Execution Environment (REE). However, the transition also poses two security challenges: enlarged attack surface resulted from the increased complexity of TAs and TEEs; the lack of trust (or isolation) among TAs and the TEE. In this paper, we first present a comprehensive analysis on the recent CVEs related to TEE and the need of multiple TEE scheme. We then propose TEEv, a TEE virtualization architecture that supports multiple isolated, restricted TEE instances (i.e., vTEEs) running concurrently. Relying on a tiny hypervisor (we call it TEE-visor), TEEv allows TEE instances from different vendors to run in isolation on the same smartphone and to host their own TAs. Therefore, a compromised vTEE cannot affect its peers or REE; TAs no longer have to run in untrusted/unsuitable TEEs. We have implemented TEEv on a development board and a real smartphone, which runs multiple commercial TEE instances from different vendors with very small porting effort. Our evaluation results show that TEEv can isolate vTEEs and defend all known attacks on TEE with only mild performance overhead.","PeriodicalId":350040,"journal":{"name":"Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116362435","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 29

The janus triad: exploiting parallelism through dynamic binary modification 双面三元组:通过动态二进制修改开发并行性

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313812

Ruoyu Zhou, George Wort, Márton Erdos, Timothy M. Jones

引用次数: 5

Stochastic resource allocation 随机资源分配

Proceedings of the 15th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments Pub Date : 2019-04-14 DOI: 10.1145/3313808.3313815

Liran Funaro, Orna Agmon Ben-Yehuda, A. Schuster

引用次数: 6