Virtual Machine Introspection: Observation or Interference?

Authors:
Kara Nance;Matt Bishop;Brian Hay
Affiliations:
University of Alaska, Fairbanks;University of California, Davis;University of Alaska, Fairbanks
Venue:
IEEE Security and Privacy
Year:
2008

Citing 0
Cited 6

A guest-transparent file integrity monitoring method in virtualization environment

Computers & Mathematics with Applications
Simulating windows-based cyber attacks using live virtual machine introspection

Proceedings of the 2010 Summer Computer Simulation Conference
Security analysis of public cloud computing

International Journal of Communication Networks and Distributed Systems
VESPA: multi-layered self-protection for cloud resources

Proceedings of the 9th international conference on Autonomic computing
Auditing cloud management using information flow tracking

Proceedings of the seventh ACM workshop on Scalable trusted computing
Virtualization: Issues, security threats, and solutions

ACM Computing Surveys (CSUR)

Quantified Score

Hi-index	0.00

Visualization

Abstract

As virtualization becomes increasingly mainstream, virtual machine introspection techniques and tools are evolving to provide methods to monitor the behavior of virtual machines. This survey classifies and describes current VMI introspection technologies according to three primary classifications: threat monitoring versus interference, semantic awareness, and event replay. The authors also describe the Virtual Introspection for Xen (VIX) tool suite, which was developed to address key VMI requirements, and outline key research areas for future investigation.