Building Reliable and Secure Virtual Machines Using Architectural Invariants

Author

Cuong Pham ; Estrada, Zachary J. ; Phuong Cao ; Kalbarczyk, Zbigniew ; Iyer, Ravishankar K.

Author_Institution

Univ. of Illinois at Urbana-Champaign, Urbana, IL, USA

Volume

12

Issue

5

fYear

2014

fDate

Sept.-Oct. 2014

Firstpage

82

Lastpage

85

Abstract

HyperTap is a hypervisor-level monitoring framework for virtual machines (VMs). It uses hardware architectural invariants properties defined and enforced by a hardware platform to establish the root of trust for logging data and events. HyperTap also supports continuous, event-driven VM monitoring, which enables both capturing the system state and responding rapidly to actions of interest.

Keywords

security of data; virtual machines; HyperTap; architectural invariants; continuous VM monitoring; data logging; event-driven VM monitoring; hardware architectural invariants properties; hypervisor-level monitoring framework; reliable virtual machines; secure virtual machines; Computer architecture; Computer security; Linux; Monitoring; Virtual machine monitors; Virtual machining; HyperTap; hang detection; hangs; hardware architectural invariants; hardware-assisted virtualization; privilege escalation; reliability; rootkits; security; virtual machines; virtual-machine introspection;

fLanguage

English

Journal_Title

Security & Privacy, IEEE

Publisher

ieee

ISSN

1540-7993

Type

jour

DOI

10.1109/MSP.2014.87

Filename

6924639