{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/95470"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/95470","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Continuous monitoring methods to achieve resiliency for virtual machines","abstract":"This dissertation describes monitoring methods to achieve both security and reliability in virtualized computer systems. Our key contribution is showing how we can perform continuous monitoring and leverage information across different layers of a virtualized computer system to detect malicious attacks and accidental failures. For monitoring software running inside a virtual ma- chine, we introduce HyperTap and Hprobes, which are out-of-VM monitoring frameworks that facilitate detection of security and reliability incidents oc- curring inside a VM. For monitoring the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.","abstract_html":"This dissertation describes monitoring methods to achieve both security and reliability in virtualized computer systems. Our key contribution is showing how we can perform continuous monitoring and leverage information across different layers of a virtualized computer system to detect malicious attacks and accidental failures. For monitoring software running inside a virtual ma- chine, we introduce HyperTap and Hprobes, which are out-of-VM monitoring frameworks that facilitate detection of security and reliability incidents oc- curring inside a VM. For monitoring the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.","abstract_has_math":false,"creators":["Pham, Cuong Manh"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Iyer, Ravishankar K.","Campbell, Roy H.","Sanders, William H.","Ramasamy, HariGovind V."],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2017,"date_issued":"2017-03-01T16:36:47Z","date_published":"2017-03-01T16:36:47Z","updated_at":"2026-07-22T22:26:37Z","subjects":["Security","Reliability","Machine Virtualization","Virtual Machine","Operating System","Continuous Monitoring"],"languages":["en"],"rights":["Copyright 2016 Cuong Manh Pham"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/95470","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Iyer, Ravishankar K.","Campbell, Roy H.","Sanders, William H.","Ramasamy, HariGovind V."]},{"key":"dc:creator","label":"Author","values":["Pham, Cuong Manh"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2017-03-01T16:36:47Z","2019-03-02T10:15:21Z","2016-12-05","2016-12"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Security","Reliability","Machine Virtualization","Virtual Machine","Operating System","Continuous Monitoring"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2016 Cuong Manh Pham"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/95470"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["This dissertation describes monitoring methods to achieve both security and reliability in virtualized computer systems. Our key contribution is showing how we can perform continuous monitoring and leverage information across different layers of a virtualized computer system to detect malicious attacks and accidental failures. For monitoring software running inside a virtual ma- chine, we introduce HyperTap and Hprobes, which are out-of-VM monitoring frameworks that facilitate detection of security and reliability incidents oc- curring inside a VM. For monitoring the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2018-12-01","The student, Cuong Pham, accepted the attached license on 2016-11-15 at 10:17.","The student, Cuong Pham, submitted this Dissertation for approval on 2016-11-15 at 10:27.","This Dissertation was approved for publication on 2016-12-05 at 16:49.","DSpace SAF Submission Ingestion Package generated from Vireo submission #10245 on 2017-02-28 at 14:36:19","Made available in DSpace on 2017-03-01T16:36:47Z (GMT). No. of bitstreams: 2 PHAM-DISSERTATION-2016.pdf: 1809854 bytes, checksum: a715068b975b3df86fd7f41b58f9c744 (MD5) LICENSE.txt: 4207 bytes, checksum: 31dedbda0fe481bbe761047f247cdf1a (MD5) Previous issue date: 2016-12-05","Embargo set by: Seth Robbins for item 98586 Lift date: 2019-03-01T16:37:19Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 98586 on 2019-03-02T10:15:21Z."]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Continuous monitoring methods to achieve resiliency for virtual machines"]}]}],"canonical_facts":{"dc:contributor":["Iyer, Ravishankar K.","Campbell, Roy H.","Sanders, William H.","Ramasamy, HariGovind V."],"dc:creator":["Pham, Cuong Manh"],"dc:date":["2017-03-01T16:36:47Z","2019-03-02T10:15:21Z","2016-12-05","2016-12"],"dc:description":["This dissertation describes monitoring methods to achieve both security and reliability in virtualized computer systems. Our key contribution is showing how we can perform continuous monitoring and leverage information across different layers of a virtualized computer system to detect malicious attacks and accidental failures. For monitoring software running inside a virtual ma- chine, we introduce HyperTap and Hprobes, which are out-of-VM monitoring frameworks that facilitate detection of security and reliability incidents oc- curring inside a VM. For monitoring the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.","Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2018-12-01","The student, Cuong Pham, accepted the attached license on 2016-11-15 at 10:17.","The student, Cuong Pham, submitted this Dissertation for approval on 2016-11-15 at 10:27.","This Dissertation was approved for publication on 2016-12-05 at 16:49.","DSpace SAF Submission Ingestion Package generated from Vireo submission #10245 on 2017-02-28 at 14:36:19","Made available in DSpace on 2017-03-01T16:36:47Z (GMT). No. of bitstreams: 2 PHAM-DISSERTATION-2016.pdf: 1809854 bytes, checksum: a715068b975b3df86fd7f41b58f9c744 (MD5) LICENSE.txt: 4207 bytes, checksum: 31dedbda0fe481bbe761047f247cdf1a (MD5) Previous issue date: 2016-12-05","Embargo set by: Seth Robbins for item 98586 Lift date: 2019-03-01T16:37:19Z Reason: Author requested U of Illinois access only (OA after 2yrs) in Vireo ETD system","U of I Only Restriction Lifted for Item 98586 on 2019-03-02T10:15:21Z."],"dc:format":["application/pdf"],"dc:identifier":["http://hdl.handle.net/2142/95470"],"dc:language":["en"],"dc:rights":["Copyright 2016 Cuong Manh Pham"],"dc:subject":["Security","Reliability","Machine Virtualization","Virtual Machine","Operating System","Continuous Monitoring"],"dc:title":["Continuous monitoring methods to achieve resiliency for virtual machines"],"dc:type":["text"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:26:37Z"}