{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/95458"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/95458","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Dynamic reliability and security monitoring: a virtual machine approach","abstract":"While one always works to prevent attacks and failures, they are inevitable and situational awareness is key to taking appropriate action. Monitoring plays an integral role in ensuring reliability and security of computing systems. Infrastructure as a Service (IaaS) clouds significantly lower the barrier for obtaining scalable computing resources and allow users to focus on what is important to them. Can a similar service be offered to provide on-demand reliability and security monitoring? Cloud computing systems are typically built using virtual machines (VMs). VM monitoring takes advantage of this and uses the hypervisor that runs VMs for robust reliability and security monitoring. The hypervisor provides an environment that is isolated from failures and attacks inside customers’ VMs. Furthermore, as a low-level manager of computing resources, the hypervisor has full access to the infrastructure running above it. Hypervisor-based VM monitoring leverages that information to observe the VMs for failures and attacks. However, existing VM monitoring techniques fall short of “as-a-service” expectations because they require a priori VM modifications and require human interaction to obtain necessary information about the underlying guest system. The research presented in this dissertation closes those gaps by providing a flexible VM monitoring framework and automated analysis to support that framework. We have developed and tested a dynamic VM monitoring framework called Hypervisor Probes (hprobes). The hprobe framework allows us to monitor the execution of both the guest OS and applications from the hypervisor. To supplement this monitoring framework, we use dynamic analysis techniques to investigate the relationship between hardware events visible to the hyper-visor and OS constructs common across OS versions. We use the results of this analysis to parametrize the hprobe-based monitors without requiring any user input. Combining the dynamic VM monitoring framework and analysis frameworks allows us to provide on-demand hypervisor based monitors for cloud VMs.","abstract_html":"While one always works to prevent attacks and failures, they are inevitable and situational awareness is key to taking appropriate action. Monitoring plays an integral role in ensuring reliability and security of computing systems. Infrastructure as a Service (IaaS) clouds significantly lower the barrier for obtaining scalable computing resources and allow users to focus on what is important to them. Can a similar service be offered to provide on-demand reliability and security monitoring? Cloud computing systems are typically built using virtual machines (VMs). VM monitoring takes advantage of this and uses the hypervisor that runs VMs for robust reliability and security monitoring. The hypervisor provides an environment that is isolated from failures and attacks inside customers’ VMs. Furthermore, as a low-level manager of computing resources, the hypervisor has full access to the infrastructure running above it. Hypervisor-based VM monitoring leverages that information to observe the VMs for failures and attacks. However, existing VM monitoring techniques fall short of “as-a-service” expectations because they require a priori VM modifications and require human interaction to obtain necessary information about the underlying guest system. The research presented in this dissertation closes those gaps by providing a flexible VM monitoring framework and automated analysis to support that framework. We have developed and tested a dynamic VM monitoring framework called Hypervisor Probes (hprobes). The hprobe framework allows us to monitor the execution of both the guest OS and applications from the hypervisor. To supplement this monitoring framework, we use dynamic analysis techniques to investigate the relationship between hardware events visible to the hyper-visor and OS constructs common across OS versions. We use the results of this analysis to parametrize the hprobe-based monitors without requiring any user input. Combining the dynamic VM monitoring framework and analysis frameworks allows us to provide on-demand hypervisor based monitors for cloud VMs.","abstract_has_math":false,"creators":["Estrada, Zachary"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Iyer, Ravishankar K.","Kalbarczyk, Zbigniew T.","Bailey, Michael D","Campbell, Roy H.","Hwu, Wen-Mei W."],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2017,"date_issued":"2017-03-01T16:36:42Z","date_published":"2017-03-01T16:36:42Z","updated_at":"2026-07-22T22:26:37Z","subjects":["virtualization","emulation","security","reliability","hprobes","cloud","hardware-asssisted virtualization","dynamic analysis"],"languages":["en"],"rights":["Copyright 2016 Zachary J Estrada"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/95458","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Iyer, Ravishankar K.","Kalbarczyk, Zbigniew T.","Bailey, Michael D","Campbell, Roy H.","Hwu, Wen-Mei W."]},{"key":"dc:creator","label":"Author","values":["Estrada, Zachary"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2017-03-01T16:36:42Z","2019-03-02T10:15:07Z","2016-10-17","2016-12"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["virtualization","emulation","security","reliability","hprobes","cloud","hardware-asssisted virtualization","dynamic analysis"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2016 Zachary J Estrada"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/95458"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["While one always works to prevent attacks and failures, they are inevitable and situational awareness is key to taking appropriate action. Monitoring plays an integral role in ensuring reliability and security of computing systems. Infrastructure as a Service (IaaS) clouds significantly lower the barrier for obtaining scalable computing resources and allow users to focus on what is important to them. Can a similar service be offered to provide on-demand reliability and security monitoring? Cloud computing systems are typically built using virtual machines (VMs). VM monitoring takes advantage of this and uses the hypervisor that runs VMs for robust reliability and security monitoring. The hypervisor provides an environment that is isolated from failures and attacks inside customers’ VMs. Furthermore, as a low-level manager of computing resources, the hypervisor has full access to the infrastructure running above it. Hypervisor-based VM monitoring leverages that information to observe the VMs for failures and attacks. However, existing VM monitoring techniques fall short of “as-a-service” expectations because they require a priori VM modifications and require human interaction to obtain necessary information about the underlying guest system. The research presented in this dissertation closes those gaps by providing a flexible VM monitoring framework and automated analysis to support that framework. We have developed and tested a dynamic VM monitoring framework called Hypervisor Probes (hprobes). The hprobe framework allows us to monitor the execution of both the guest OS and applications from the hypervisor. To supplement this monitoring framework, we use dynamic analysis techniques to investigate the relationship between hardware events visible to the hyper-visor and OS constructs common across OS versions. We use the results of this analysis to parametrize the hprobe-based monitors without requiring any user input. Combining the dynamic VM monitoring framework and analysis frameworks allows us to provide on-demand hypervisor based monitors for cloud VMs.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2018-12-01","The student, Zachary Estrada, accepted the attached license on 2016-10-10 at 09:21.","The student, Zachary Estrada, submitted this Dissertation for approval on 2016-10-13 at 14:06.","This Dissertation was approved for publication on 2016-10-17 at 08:32.","DSpace SAF Submission Ingestion Package generated from Vireo submission #10179 on 2017-02-28 at 14:36:04","Made available in DSpace on 2017-03-01T16:36:42Z (GMT). No. of bitstreams: 5 ESTRADA-DISSERTATION-2016.pdf: 1899308 bytes, checksum: 5500ce63311d85e8acb8eb876f2c5a64 (MD5) LICENSE.txt: 4212 bytes, checksum: fbf830a9f68958708d4689f94630a08d (MD5) PROQUEST_LICENSE.txt: 4558 bytes, checksum: 4532b85ecd4e46d1353d458689c3146c (MD5) ieee_copyright.pdf: 78136 bytes, checksum: 570d6a36e437ac8e6b3d38cf825525e1 (MD5) springer_license.pdf: 20363 bytes, checksum: 481bc0cd5a10845634251be11c4f3056 (MD5) Previous issue date: 2016-10-17","Embargo set by: Seth Robbins for item 98574 Lift date: 2019-03-01T16:37:19Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 98574 on 2019-03-02T10:15:07Z."]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Dynamic reliability and security monitoring: a virtual machine approach"]}]}],"canonical_facts":{"dc:contributor":["Iyer, Ravishankar K.","Kalbarczyk, Zbigniew T.","Bailey, Michael D","Campbell, Roy H.","Hwu, Wen-Mei W."],"dc:creator":["Estrada, Zachary"],"dc:date":["2017-03-01T16:36:42Z","2019-03-02T10:15:07Z","2016-10-17","2016-12"],"dc:description":["While one always works to prevent attacks and failures, they are inevitable and situational awareness is key to taking appropriate action. Monitoring plays an integral role in ensuring reliability and security of computing systems. Infrastructure as a Service (IaaS) clouds significantly lower the barrier for obtaining scalable computing resources and allow users to focus on what is important to them. Can a similar service be offered to provide on-demand reliability and security monitoring? Cloud computing systems are typically built using virtual machines (VMs). VM monitoring takes advantage of this and uses the hypervisor that runs VMs for robust reliability and security monitoring. The hypervisor provides an environment that is isolated from failures and attacks inside customers’ VMs. Furthermore, as a low-level manager of computing resources, the hypervisor has full access to the infrastructure running above it. Hypervisor-based VM monitoring leverages that information to observe the VMs for failures and attacks. However, existing VM monitoring techniques fall short of “as-a-service” expectations because they require a priori VM modifications and require human interaction to obtain necessary information about the underlying guest system. The research presented in this dissertation closes those gaps by providing a flexible VM monitoring framework and automated analysis to support that framework. We have developed and tested a dynamic VM monitoring framework called Hypervisor Probes (hprobes). The hprobe framework allows us to monitor the execution of both the guest OS and applications from the hypervisor. To supplement this monitoring framework, we use dynamic analysis techniques to investigate the relationship between hardware events visible to the hyper-visor and OS constructs common across OS versions. We use the results of this analysis to parametrize the hprobe-based monitors without requiring any user input. Combining the dynamic VM monitoring framework and analysis frameworks allows us to provide on-demand hypervisor based monitors for cloud VMs.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2018-12-01","The student, Zachary Estrada, accepted the attached license on 2016-10-10 at 09:21.","The student, Zachary Estrada, submitted this Dissertation for approval on 2016-10-13 at 14:06.","This Dissertation was approved for publication on 2016-10-17 at 08:32.","DSpace SAF Submission Ingestion Package generated from Vireo submission #10179 on 2017-02-28 at 14:36:04","Made available in DSpace on 2017-03-01T16:36:42Z (GMT). No. of bitstreams: 5 ESTRADA-DISSERTATION-2016.pdf: 1899308 bytes, checksum: 5500ce63311d85e8acb8eb876f2c5a64 (MD5) LICENSE.txt: 4212 bytes, checksum: fbf830a9f68958708d4689f94630a08d (MD5) PROQUEST_LICENSE.txt: 4558 bytes, checksum: 4532b85ecd4e46d1353d458689c3146c (MD5) ieee_copyright.pdf: 78136 bytes, checksum: 570d6a36e437ac8e6b3d38cf825525e1 (MD5) springer_license.pdf: 20363 bytes, checksum: 481bc0cd5a10845634251be11c4f3056 (MD5) Previous issue date: 2016-10-17","Embargo set by: Seth Robbins for item 98574 Lift date: 2019-03-01T16:37:19Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 98574 on 2019-03-02T10:15:07Z."],"dc:format":["application/pdf"],"dc:identifier":["http://hdl.handle.net/2142/95458"],"dc:language":["en"],"dc:rights":["Copyright 2016 Zachary J Estrada"],"dc:subject":["virtualization","emulation","security","reliability","hprobes","cloud","hardware-asssisted virtualization","dynamic analysis"],"dc:title":["Dynamic reliability and security monitoring: a virtual machine approach"],"dc:type":["text"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:26:37Z"}