TSAC: Enforcing Isolation ofVirtual Machines in Clouds | IEEE Journals & Magazine | IEEE Xplore

TSAC: Enforcing Isolation ofVirtual Machines in Clouds


Abstract:

Virtualization plays a vital role in building the infrastructure of clouds, and isolation is considered as one of its important features. However, we demonstrate with pra...Show More

Abstract:

Virtualization plays a vital role in building the infrastructure of clouds, and isolation is considered as one of its important features. However, we demonstrate with practical measurements that there exist two kinds of isolation problems in current virtualized systems, due to cache interference in a multi-core processor. That is, one virtual machine could degrade the performance or obtain the load information of another virtual machine, which running on a same physical machine. Then we present a time-sensitive contention management approach (TSAC) for allocating resources dynamically in the virtual machine monitor, in which virtual machines are controlled to share some physical resources (e.g., CPU or page color) in a dynamical manner, in order to enforce isolation between the virtual machines without sacrificing performance of the virtualized system. We have implemented a working prototype based on Xen, evaluated the implemented prototype with experiments, and experimental results show that TSAC could significantly improve isolation of virtualization. Specifically, compared to the default Xen, TSAC could improve the performance of the victim virtual machine by up to about 78 percent, and perform well in blocking its cache-based load information leakage.
Published in: IEEE Transactions on Computers ( Volume: 64, Issue: 5, 01 May 2015)
Page(s): 1470 - 1482
Date of Publication: 08 May 2014

ISSN Information:


Contact IEEE to Subscribe

References

References is not available for this document.