Continuous monitoring methods to achieve resiliency for virtual machines

This dissertation describes monitoring methods to achieve both security and reliability in virtualized computer systems. Our key contribution is showing how we can perform continuous monitoring and leverage information across different layers of a virtualized computer system to detect malicious attacks and accidental failures. For monitoring software running inside a virtual ma- chine, we introduce HyperTap and Hprobes, which are out-of-VM monitoring frameworks that facilitate detection of security and reliability incidents oc- curring inside a VM. For monitoring the hypervisor, we introduce hShield, a Control-Flow Integrity (CFI) enforcement method to detect VM-escape at- tacks. HyperTap, Hprobes, and hShield create a complete chain-of-trust for the entire virtualization software stack.

Name thesis:degree_name

Ph.D.

Level thesis:degree_level

Dissertation

Discipline thesis:degree_discipline

Electrical & Computer Engr

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2017

Author dc:creator

• Pham, Cuong Manh

Contributors dc:contributor

• Iyer, Ravishankar K.
• Campbell, Roy H.
• Sanders, William H.
• Ramasamy, HariGovind V.

• Security
• Reliability
• Machine Virtualization
• Virtual Machine
• Operating System
• Continuous Monitoring

Statement dc:rights

• Copyright 2016 Cuong Manh Pham

Language dc:language

en

Handle dc:identifier

http://hdl.handle.net/2142/95470

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/95470