Operating System Based Virtualization Models in Cloud Computing Dev Ras Pandey, Bharat Mishra, S
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Design and Evaluation of Self-Management Approaches for Virtual Machine-Based Environments
Fachhochschule Wiesbaden Fachbereich Design Informatik Medien Studiengang Informatik Master-Thesis zur Erlangung des akademischen Grades Master of Science – M.Sc. Design and Evaluation of Self-Management Approaches for Virtual Machine-Based Environments vorgelegt von Dan Marinescu am 29. Februar 2008 Referent: Prof. Dr. Reinhold Kröger Korreferent: Prof. Dr. Steffen Reith II Erklärung gem. BBPO, Ziff. 6.4.2 Ich versichere, dass ich die Master-Thesis selbstständig verfasst und keine anderen als die angegebenen Hilfsmittel benutzt habe. Wiesbaden, 29.02.2008 Dan Marinescu Hiermit erkläre ich mein Einverständnis mit den im Folgenden aufgeführten Verbreitungs- formen dieser Master-Thesis: Verbreitungsform ja nein Einstellung der Arbeit in die √ Bibliothek der FHW Veröffentlichung des Titels der √ Arbeit im Internet Veröffentlichung der Arbeit im √ Internet Wiesbaden, 29.02.2008 Dan Marinescu III IV Contents 1 Introduction 1 2 Background 5 2.1 Virtualization ................................ 5 2.1.1 Taxonomy ............................. 5 2.1.2 Case Study: Xen .......................... 10 2.1.3 Live Migration ........................... 13 2.1.4 Hardware-Assisted Virtualization ................. 16 2.1.5 Management of Vitual Machine Environments .......... 17 2.2 Service Level Management ......................... 20 2.3 Autonomic Computing ........................... 21 2.3.1 Motivation ............................. 21 2.3.2 Taxonomy ............................. 22 2.3.3 Architectural Considerations .................... 23 2.3.4 Examples of Autonomic Computing Systems ........... 24 2.4 Complexity theory and Optimization .................... 25 2.4.1 Introduction to Complexity Theory ................ 25 2.4.2 Complexity Classes ......................... 25 2.4.3 Optimization Problems ....................... 26 2.4.4 The Knapsack Family of Problems ................. 27 2.4.5 Approximation Algorithms ..................... 29 2.4.6 Heuristics .............................. 32 V 3 Analysis 37 3.1 State of the Art .............................. -
Virtual Square: All the Virtuality You Always Wanted but You Were Afraid to Ask
Virtual Square: all the virtuality you always wanted but you were afraid to ask. Renzo Davoli i Computer Science Department vol Da ALMA MATER STUDIORUM: University of Bologna o Renz eft, yl WorkShop 2007 sul Calcolo e Reti dell'INFN op C 7 Rimini, 10 maggio 2007 00 2 © re ua Sq l ua t Vir Virtual Square VIRTUAL VIRTUAL VIRTUAL SQUARED i VIRTUAL SQUARE vol Da o VIRTUAL VIRTUAL Renz eft, VIRTUAL yl VIRTUAL op C 7 00 2 VIRTUAL © re VIRTUAL ua Sq l ua t Vir VIRTUALITY today ● Virtual Machines – historical topic – lots of papers – lots of tools i vol Da – ... but something is already missing o Renz ● Virtual Networking eft, yl op – less historical C 7 00 2 – several papers © re ua Sq l ua t Vir Virtual Square Virtualization concepts and tools are disconnected. i There is a world of new applications that vol Da can be realized by interoperating, o Renz integrated virtuality eft, yl op C 7 UNIFICATION IS NEEDED 00 2 © re ua Sq l ua t Vir Virtual Square © 2007 Copyleft, Renzo Davoli Vi rtual S qu are Some Examples of VM (free software) ● Qemu: PVM or SVM, User Mode User Access (or dual-mode with KQEMU, proprietary sw). – cross emulation platform (ia32, ia64, ppc, i m68k, sparc, arm...) vol Da o – dynamic translation Renz ● eft, XEN: SVM, Native. yl op C 7 – xen uses para-virtualization (O.S. in domain0 00 2 © has the real device drivers). re ua – (xen ideas come from the Denali project: Sq l ua t SVN, Native, real virtualization). -
Virtualization Technologies Overview Course: CS 490 by Mendel
Virtualization technologies overview Course: CS 490 by Mendel Rosenblum Name Can boot USB GUI Live 3D Snaps Live an OS on mem acceleration hot of migration another ory runnin disk alloc g partition ation system as guest Bochs partially partially Yes No Container s Cooperati Yes[1] Yes No No ve Linux (supporte d through X11 over networkin g) Denali DOSBox Partial (the Yes No No host OS can provide DOSBox services with USB devices) DOSEMU No No No FreeVPS GXemul No No Hercules Hyper-V iCore Yes Yes No Yes No Virtual Accounts Imperas Yes Yes Yes Yes OVP (Eclipse) Tools Integrity Yes No Yes Yes No Yes (HP-UX Virtual (Integrity guests only, Machines Virtual Linux and Machine Windows 2K3 Manager in near future) (add-on) Jail No Yes partially Yes No No No KVM Yes [3] Yes Yes [4] Yes Supported Yes [5] with VMGL [6] Linux- VServer LynxSec ure Mac-on- Yes Yes No No Linux Mac-on- No No Mac OpenVZ Yes Yes Yes Yes No Yes (using Xvnc and/or XDMCP) Oracle Yes Yes Yes Yes Yes VM (manage d by Oracle VM Manager) OVPsim Yes Yes Yes Yes (Eclipse) Padded Yes Yes Yes Cell for x86 (Green Hills Software) Padded Yes Yes Yes No Cell for PowerPC (Green Hills Software) Parallels Yes, if Boot Yes Yes Yes DirectX 9 Desktop Camp is and for Mac installed OpenGL 2.0 Parallels No Yes Yes No partially Workstati on PearPC POWER Yes Yes No Yes No Yes (on Hypervis POWER 6- or (PHYP) based systems, requires PowerVM Enterprise Licensing) QEMU Yes Yes Yes [4] Some code Yes done [7]; Also supported with VMGL [6] QEMU w/ Yes Yes Yes Some code Yes kqemu done [7]; Also module supported -
Vmware Et Sécurité
HERVÉ SCHAUER CONSULTANTS Cabinet de Consultants en Sécurité Informatique depuis 1989 Spécialisé sur Unix, Windows, TCP/IP et Internet OSSIROSSIR GroupeGroupe SURSUR 88 juilletjuillet 20082008 VMwareVMware etet sécuritésécurité JulienJulien RaeisRaeis <[email protected]> NicolasNicolas CollignonCollignon <[email protected]> AgendaAgenda Rappels sur la virtualisation Mesures de sécurité intégrées à VMware Virtualisation et DMZ Revue des vulnérabilités Retour d'expérience HSC 2/64 Copyright Hervé Schauer Consultants 2008 - Reproduction Interdite Rappels sur la virtualisation 3/64 Copyright Hervé Schauer Consultants 2008 - Reproduction Interdite DéfinitionsDéfinitions « Virtuel : Se dit des éléments (terminaux, mémoire...) d'un système informatique considérés comme ayant des propriétés différentes de leurs caractéristiques physiques » - Grand Dictionnaire Encyclopédique Larousse « Virtualisation : abstraction des ressources d'un système informatique. » 4/64 Copyright Hervé Schauer Consultants 2008 - Reproduction Interdite HistoriqueHistorique Concept introduit dans les années 60 But : partitionner les ressources des coûteux mainframes de l'époque IBM M44/44X, naissance du terme « pseudo-machine » Première implémentation de machines virtuelles IBM CP-40 Système tournant sur S/360-40 Perte d'intérêt dans les années 80 Déport des applications sur des clients et serveurs x86 Architecture « bon marché » Mais coûts d'infrastructure physique élevés, manque de protection en cas de panne, maintenance des postes de travail coûteuse, etc. -
Comparison of Platform Virtual Machines - Wikipedia
Comparison of platform virtual machines - Wikipedia... http://en.wikipedia.org/wiki/Comparison_of_platform... Comparison of platform virtual machines From Wikipedia, the free encyclopedia The table below compares basic information about platform virtual machine (VM) packages. Contents 1 General Information 2 More details 3 Features 4 Other emulators 5 See also 6 References 7 External links General Information Name Creator Host CPU Guest CPU Bochs Kevin Lawton any x86, AMD64 CHARON-AXP Stromasys x86 (64 bit) DEC Alphaserver CHARON-VAX Stromasys x86, IA-64 VAX x86, x86-64, SPARC (portable: Contai ners (al so 'Zones') Sun Microsystems (Same as host) not tied to hardware) Dan Aloni helped by other Cooperati ve Li nux x86[1] (Same as parent) developers (1) Denal i University of Washington x86 x86 Peter Veenstra and Sjoerd with DOSBox any x86 community help DOSEMU Community Project x86, AMD64 x86 1 of 15 10/26/2009 12:50 PM Comparison of platform virtual machines - Wikipedia... http://en.wikipedia.org/wiki/Comparison_of_platform... FreeVPS PSoft (http://www.FreeVPS.com) x86, AMD64 compatible ARM, MIPS, M88K GXemul Anders Gavare any PowerPC, SuperH Written by Roger Bowler, Hercul es currently maintained by Jay any z/Architecture Maynard x64 + hardware-assisted Hyper-V Microsoft virtualization (Intel VT or x64,x86 AMD-V) OR1K, MIPS32, ARC600/ARC700, A (can use all OVP OVP Imperas [1] [2] Imperas OVP Tool s x86 (http://www.imperas.com) (http://www.ovpworld compliant models, u can write own to pu OVP APIs) i Core Vi rtual Accounts iCore Software -
A Client Honeypot
MASARYKOVA UNIVERSITY FACULTY OF INFORMATICS A CLIENT HONEYPOT MASTER’S THESIS BC. VLADIMÍR BARTL BRNO, FALL 2014 STATEMENT OF AUTHORSHIP Hereby I declare that this thesis is my original work, which I accomplished independently. All sources, references and literature I use or refer to are accurately cited and stated in the thesis. Signature:............................................ i ACKNOWLEDGEMENT I wish to express my gratitude to RNDr. Marian Novotny, Ph.D. for governance over this thesis. Furthermore, I wish to thank my family and my girlfriend for their support throughout the process of writing. TUTOR: RNDr. Marian Novotny, Ph.D. ii ABSTRACT This thesis discusses a topic of malicious software giving emphasis on client side threats and vulnerable users. It gives an insight into concept of client honeypots and compares several implementations of this approach. A configuration of one selected tool is proposed and tested in the experiment. KEYWORDS client honeypot, low-interaction, high-interaction, malware, attacker, exploit, vulnerability, Cuckoo Sandbox iii TABLE OF CONTENTS 1 INTRODUCTION .......................................................................................................................... 3 1.1 MOTIVATION ........................................................................................................................ 4 1.2 CONTRIBUTION .................................................................................................................... 6 2 BACKGROUND THEORY .......................................................................................................... -
Deploying the Vmware Infrastructure John Arrasjid, Karthik Balachandran, Daniel Conde, Gary Lamb, and Steve Kaplan
Short Topics in 18 18 System Administration Jane-Ellen Long, Series Editor Arrasjid, Balachandran, Conde, Lamb, and Kaplan and Lamb, Conde, Arrasjid, Balachandran, Deploying the VMware Infrastructure John Arrasjid, Karthik Balachandran, Daniel Conde, Gary Lamb, and Steve Kaplan Deploying the VMware Infrastructure VMware the Deploying cover.indd 1 8/8/08 9:54:21 AM Booklets in the Series #18: Deploying the VMware Infrastructure, by John Arrasjid, Karthik Balachandran, Daniel Conde, Gary Lamb, and Steve Kaplan #17: LCFG: A Practical Tool for System Configuration, by Paul Anderson #16: A System Engineer’s Guide to Host Configuration and Maintenance Using Cfengine, by Mark Burgess and Æleen Frisch #15: Internet Postmaster: Duties and Responsibilities, by Nick Christenson and Brad Knowles #14: System Configuration, by Paul Anderson #13: The Sysadmin’s Guide to Oracle, by Ben Rockwood #12: Building a Logging Infrastructure, by Abe Singer and Tina Bird #11: Documentation Writing for System Administrators, by Mark C. Langston #10: Budgeting for SysAdmins, by Adam Moskowitz #9: Backups and Recovery, by W. Curtis Preston and Hal Skelly #8: Job Descriptions for System Administrators, Revised and Expanded Edition, edited by Tina Darmohray #7: System and Network Administration for Higher Reliability, by John Sellens #6: A System Administrator’s Guide to Auditing, by Geoff Halprin #5: Hiring System Administrators, by Gretchen Phillips #4: Educating and Training System Administrators: A Survey, by David Kuncicky and Bruce Alan Wynn #3: System Security: A Management Perspective, by David Oppenheimer, David Wagner, and Michele D. Crabb, and edited by Dan Geer #2: A Guide to Developing Computing Policy Documents, edited by Barbara L. -
Virtually Linux Virtualization Techniques in Linux
Virtually Linux Virtualization Techniques in Linux Chris Wright OSDL [email protected] Abstract ware1 or software [16, 21, 19], may include any subset of a machine’s resources, and has Virtualization provides an abstraction layer a wide variety of applications. Such usages mapping a virtual resource to a real resource. include machine emulation, hardware consol- Such an abstraction allows one machine to be idation, resource isolation, quality of service carved into many virtual machines as well as resource allocation, and transparent resource allowing a cluster of machines to be viewed redirection. Applications of these usage mod- as one. Linux provides a wealth of virtual- els include virtual hosting, security, high avail- ization offerings. The technologies range in ability, high throughput, testing, and ease of the problems they solve, the models they are administration. useful in, and their respective maturity. This It is interesting to note that differing virtual- paper surveys some of the current virtualiza- ization models may have inversely correlated tion techniques available to Linux users, and proportions of virtual to physical resources. it reviews ways to leverage these technologies. For example, the method of carving up a sin- Virtualization can be used to provide things gle machine into multiple machines—useful such as quality of service resource allocation, in hardware consolidation or virtual hosting— resource isolation for security or sandboxing, looks quite different from a single system im- transparent resource redirection for availability age (SSI) [15]—useful in clustering. This pa- and throughput, and simulation environments per primarily focuses on providing multiple for testing and debugging. virtual instances of a single physical resource, however, it does cover some examples of a sin- 1 Introduction gle virtual resource mapping to multiple phys- ical resources. -
An Apple a Day…
LINUXCOVER USERSTORY SchlagwortMac on Linux sollte hier stehen Running Mac OS X under Linux AN APPLE A DAY… We used the Ubuntu distribution for the PowerPC processor, as it proved impossible to get either Gentoo or the commercial Yellow Dog distribution to display a GUI on our iBook G4/800 with a Radeon Mobility 9200 graphics chip. The Ubuntu installer works with the Debian apt-get package manager, which downloads files off the Internet. Mac-on- Linux needs a few kernel modules for PPC Linux, and you will need to compile these modules yourself. Compiling these modules means installing a few tools, if they are not already installed. The fol- lowing command downloads the pack- ages and installs them: sudo apt-get install build-U essential linux-headers-2.6-U powerpc If you are prompted for a password, type Emulators now give users the ability to run their beloved Mac OS X on your normal user account password, as Ubuntu does not typically have an Linux, bringing birds of a feather back together. administrative (root) account (see [8]). Instead, users can run commands that BY OLIVER FROMMEL typically need root privileges using sudo. Unfortunately, the standard Ubuntu repository does not include the files, so he easiest way to run Mac pro- also gives you Linux device drivers that you will first need to add the Multiverse grams on Linux is the free Mac- have been optimized for this application repository, which includes packages that Ton-Linux [1] software. Mac-on- in an approach similar to Vmware’s, are not part of the standard Ubuntu dis- Linux does not give you a hardware which explains why Mac-on-Linux is tribution. -
Curriculum Vitae Simone Vellei
Curriculum Vitae Simone Vellei Curriculum vitae - Simone Vellei Tel: +39.339.1298166 E-mail: [email protected] Blog: http://henomis.wordpress.com Consulting: http://opsys.dragas.org Person: • Born: November 7th 1979 • Nationality: Italian • Martial status: Married Profession: • GNU/Linux embedded system engineer at Inim Electronicsa. • Freelance IT consultant. • Project Manager ad developer of FlatNukea. Education: • March 2005: Master Degree in computer science at the Department of Computer Science, University of Bologna, Italy. • 1998: Diploma at “Liceo Statale B. Rossetti” in San Benedetto del Tronto, Italy. Employment: • 2006-now: GNU/Linux embedded system engineer at Inim Electronics (Monteprandone, AP - Italy) . – Research, design and implementation of a token-ring stack over RS485 bus, Renesas H8SX micro- controller (Hornet®a). – Research, design and implementation of SmartLANa, GNU/Linux embedded board that permits to control remotely SmartLoop system (Janus®a). – Implementation of SmartLAN TCP/IP comunication channel (WIN32 dll library). – Research, design and implementation of SmartLAN/Ga GNU/Linux embedded board that permits to control remotely SmartLiving system. – Implementation of SmartLAN/G TCP/IP comunication channel (WIN32 and GNU/Linux libraries). – Research, design and implementation of Evolutiona domotic and multimedia keypad for SmartLiv- ing system. Last update: April 16, 2012 pag. 1 Curriculum Vitae Simone Vellei • 2008-now: freelance IT consultant. – Several collaborations for software development with private companies. – Several collaborations for GNU/Linux courses with associations or cooperatives. – Several consultancies for internet/intranet security. • 2005: Software developer at Bentel Security (Corropoli, TE). – Development of internal usage software. – Development of WIN32 dlls for cryptographic level of SIA-IP protocol. – Research and study for the selection of GNU/Linux embedded platform. -
Application Sandboxes: a Pen-Tester's
Application Sandboxes: A Pen-Tester’s Perspective Rahul Kashyap, [email protected] Rafal Wojtczuk, [email protected] 1 Table of Contents 1.0.0 Executive Summary 4 2.0.0 Results Summary 4 3.0.0 Methodology and Techniques Used 4 4.0.0 Introduction 5 4.1.0 What is a Sandbox? 5 4.2.0 Products Tested 6 5.0.0 Windows Architecture Overview 10 5.1.0 Windows Integrity Mechanisms 11 5.2.0 Malware Trends 12 6.0.0 Type A Sandbox 12 6.1.0 Architecture 12 7.0.0 Type B Sandbox 16 7.1.0 Chromium Sandbox Architecture 16 8.0.0 Exploitation 18 8.1.0 Category 1: Vulnerabilities in OS Kernel 18 8.1.1.0 Kernel Exploit 1 19 8.1.1.1 Type A Sandbox 19 8.1.2.0 Kernel Exploit 2 22 8.1.2.1 Type A Sandbox 23 8.1.2.2 Type B Sandbox 24 8.1.3.0 Kernel Exploit 3 25 8.1.3.1 Type A Sandbox 25 8.1.3.2 Type B Sandbox 26 8.1.4.0 Summary 28 8.2.0 Category 2: Vulnerabilities in OS User Mode Components 28 8.2.1 TCP/IP Networking in Sandboxes 28 8.2.1.1 ALPC Ports 29 8.2.2 User Mode Exploit 31 8.2.2.1 Type A Sandbox 31 8.2.2.2 Type B Sandbox 34 8.2.3 Summary 36 8.3.0 Category 3: Sandbox Leakage 37 8.3.1 Webcam Access 37 8.3.2 Screen Scraping 39 8.3.3 Keylogging 40 8.3.4 ClipBoard Hijack 42 8.3.5 Steal Files 44 8.3.6 Network Shares Access 45 8.3.7 Summary 47 8.4.0 Category 4: Sandbox Vulnerabilities 47 8.4.1 Summary 48 8.5.0 A sandbox Inside a Sandbox 48 8.5.1 Type A Sandbox + Type B Sandbox 48 9.0.0 Conclusion 50 10.0.0 Bibliography 51 11.0.0 Appendix A. -
Mac OS X Emulation Unter Windows XP
WinXP Consoliero– Teil 1 Seite: 1/10 WinXP Consoliero Weiterführende Dokumentationen für Power User. WinXP Consoliero – Teil 1: Mac OS X Emulation unter Windows XP Christoph Müller, PTS Version: 1.1 Autor: Christoph Müller Datum: 11.06.2004 WinXP Consoliero– Teil 1 Seite: 2/10 Für welchen Windows Benutzer wäre es nicht ein Traum, das Mac OS X in seinem Zugriff zu haben? Zwei Studenten aus Deutschland bringen den Windows Benutzer diesen Traum etwas näher. Weit davon entfernt perfekt zu sein, haben sie einen kleinen Emulator auf ihrer Webseite, den es sich lohnt einmal genauer anzuschauen. PearPC 0.1.2 PearPC ist eine kleine Emulation eines PPC G3 Prozessors, sowie dem Boot-Rom. Das Programm ist noch weit davon entfernt vollständig zu sein. Es ist nicht besonders schnell und unterstützt unter PC auch noch keine Netzwerkkarten. Lediglich unter anderen Unix-Varianten wird eine Netzwerkkarte installiert. Zum Thema Linux und Mac OS X. Wer unter Linux einen Mac OS X Emulation laufen lassen will, soll sich einmal „Mac-on-Linux“ anschauen. Für alle anderen welche Mac OS X einmal auf dem PC laufen lassen möchten, nehmen sich ein paar Stunden Zeit und beschäftigen sich mit PearPC. Es ist zwar weit davon entfernt eine brauchbare Alternative zu Apple-Hardware zu sein. Spaßig ist es auf jeden Fall. Und verwunderte Blicke der Mac OS X Benutzer sind einem gewiss! Lesen Sie diese ganze Anleitung ganz durch, bevor Sie beginnen. So wird einem klar, wie das Konzept funktioniert. Ebenso werden einem die Vorbereitungen und die Art wie sie durchgeführt werden klar. Das hilft, denn die Installation wie auch die Vorbereitung, alles in allem etwa fünf Stunden in Anspruch nehmen.