{"title":"在多核系统中通过VM固定和页面着色实现安全的共同驻留虚拟化","authors":"S. Sarda, R. Kotecha, P. Shetty, S. Dhoot","doi":"10.1109/ICCCTAM.2012.6488061","DOIUrl":null,"url":null,"abstract":"Cloud computing adoption and diffusion are threatened by unresolved security issues that affect both the cloud provider and the cloud user. In case of cloud, data from potentially competing sources could reside on the same disk or same memory structure, and a computer process can violate its virtual boundary to access the competitor's data. Current Virtual Machine Monitors (VMMs) used in cloud provide a good isolation in high level computing resources viz. memory, CPU, I/O devices. However, when looking at usage of shared cache, it may happen that one virtual machine (VM) interferes with another co-resident virtual machine due to uncontrolled cache sharing. Here performance isolation cannot be guaranteed and one VM may extract sensitive information from another VM. The proposed solution is intended to isolate the usage of shared cache by co-resident VMs and thus ensure no inter-VM interference.","PeriodicalId":111485,"journal":{"name":"2012 International Conference on Cloud Computing Technologies, Applications and Management (ICCCTAM)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2012-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":"{\"title\":\"Secure Co-resident virtualization in multicore systems by VM pinning and page coloring\",\"authors\":\"S. Sarda, R. Kotecha, P. Shetty, S. Dhoot\",\"doi\":\"10.1109/ICCCTAM.2012.6488061\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Cloud computing adoption and diffusion are threatened by unresolved security issues that affect both the cloud provider and the cloud user. In case of cloud, data from potentially competing sources could reside on the same disk or same memory structure, and a computer process can violate its virtual boundary to access the competitor's data. Current Virtual Machine Monitors (VMMs) used in cloud provide a good isolation in high level computing resources viz. memory, CPU, I/O devices. However, when looking at usage of shared cache, it may happen that one virtual machine (VM) interferes with another co-resident virtual machine due to uncontrolled cache sharing. Here performance isolation cannot be guaranteed and one VM may extract sensitive information from another VM. The proposed solution is intended to isolate the usage of shared cache by co-resident VMs and thus ensure no inter-VM interference.\",\"PeriodicalId\":111485,\"journal\":{\"name\":\"2012 International Conference on Cloud Computing Technologies, Applications and Management (ICCCTAM)\",\"volume\":\"4 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2012-12-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2012 International Conference on Cloud Computing Technologies, Applications and Management (ICCCTAM)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICCCTAM.2012.6488061\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2012 International Conference on Cloud Computing Technologies, Applications and Management (ICCCTAM)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICCCTAM.2012.6488061","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Secure Co-resident virtualization in multicore systems by VM pinning and page coloring
Cloud computing adoption and diffusion are threatened by unresolved security issues that affect both the cloud provider and the cloud user. In case of cloud, data from potentially competing sources could reside on the same disk or same memory structure, and a computer process can violate its virtual boundary to access the competitor's data. Current Virtual Machine Monitors (VMMs) used in cloud provide a good isolation in high level computing resources viz. memory, CPU, I/O devices. However, when looking at usage of shared cache, it may happen that one virtual machine (VM) interferes with another co-resident virtual machine due to uncontrolled cache sharing. Here performance isolation cannot be guaranteed and one VM may extract sensitive information from another VM. The proposed solution is intended to isolate the usage of shared cache by co-resident VMs and thus ensure no inter-VM interference.