skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Hypervisor Asssisted Forensics and Incident Response in the Cloud.

Abstract

Abstract not provided.

Authors:
;
Publication Date:
Research Org.:
Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)
Sponsoring Org.:
USDOE National Nuclear Security Administration (NNSA)
OSTI Identifier:
1378159
Report Number(s):
SAND2016-8258C
646868
DOE Contract Number:
AC04-94AL85000
Resource Type:
Conference
Resource Relation:
Conference: Proposed for presentation at the 23rd ACM Conference on Computer and Communications Security held October 24-27, 2016 in Vienna, Austria.
Country of Publication:
United States
Language:
English

Citation Formats

Urias, Vincent, and Loverro, Caleb. Hypervisor Asssisted Forensics and Incident Response in the Cloud.. United States: N. p., 2016. Web.
Urias, Vincent, & Loverro, Caleb. Hypervisor Asssisted Forensics and Incident Response in the Cloud.. United States.
Urias, Vincent, and Loverro, Caleb. 2016. "Hypervisor Asssisted Forensics and Incident Response in the Cloud.". United States. doi:. https://www.osti.gov/servlets/purl/1378159.
@article{osti_1378159,
title = {Hypervisor Asssisted Forensics and Incident Response in the Cloud.},
author = {Urias, Vincent and Loverro, Caleb},
abstractNote = {Abstract not provided.},
doi = {},
journal = {},
number = ,
volume = ,
place = {United States},
year = 2016,
month = 8
}

Conference:
Other availability
Please see Document Availability for additional information on obtaining the full-text document. Library patrons may search WorldCat to identify libraries that hold this conference proceeding.

Save / Share:
  • Abstract not provided.
  • This paper discusses the implementation of a new hypervisor mechanism for loading dynamic shared objects (modules) at runtime. These loadable hypervisor modules (LHM) are modeled after the loadable kernel modules used in Linux. We detail the current LHM implementation based on the Xen hypervisor. Potential use cases for this LHM mechanism include dynamic hypervisor instrumentation for debug tracing or performance analysis. We discuss the initial LHM prototype and future plans.
  • With the advent of virtual machine (VM)-based platforms for parallel computing, it is now possible to execute parallel discrete event simulations (PDES) over multiple virtual machines, in contrast to executing in native mode directly over hardware as is traditionally done over the past decades. While mature VM-based parallel systems now offer new, compelling benefits such as serviceability, dynamic reconfigurability and overall cost effectiveness, the runtime performance of parallel applications can be significantly affected. In particular, most VM-based platforms are optimized for general workloads, but PDES execution exhibits unique dynamics significantly different from other workloads. Here we first present results frommore » experiments that highlight the gross deterioration of the runtime performance of VM-based PDES simulations when executed using traditional VM schedulers, quantitatively showing the bad scaling properties of the scheduler as the number of VMs is increased. The mismatch is fundamental in nature in the sense that any fairness-based VM scheduler implementation would exhibit this mismatch with PDES runs. We also present a new scheduler optimized specifically for PDES applications, and describe its design and implementation. Experimental results obtained from running PDES benchmarks (PHOLD and vehicular traffic simulations) over VMs show over an order of magnitude improvement in the run time of the PDES-optimized scheduler relative to the regular VM scheduler, with over 20 reduction in run time of simulations using up to 64 VMs. The observations and results are timely in the context of emerging systems such as cloud platforms and VM-based high performance computing installations, highlighting to the community the need for PDES-specific support, and the feasibility of significantly reducing the runtime overhead for scalable PDES on VM platforms.« less
  • Abstract not provided.
  • The Los Alamos Controlled Air Incinerator (CAI) is a system designed to accept radioactive mixed waste containing alpha-emitting radionuclides. A mathematical model was developed to predict the pressure response throughout the offgas treatment system of the CAI during three hypothetical incident scenarios. The scenarios examined included: (1) loss of burner flame and failure of the flame safeguard system with subsequent reignition of fuel gas in the primary chamber, (2) pyrolytic gas buildup from a waste package due to loss of induced draft and subsequent restoration of induced draft, and (3) accidental charging of propellant spray cans in a solid wastemore » package to the primary chamber during a normal feed cycle. For each of the three scenarios, the finite element computer model was able to determine the transient pressure surge and decay response throughout the system. Of particular interest were the maximum absolute pressures attainable at critical points in the system as well as maximum differential pressures across the high efficiency particulate air (HEPA) filters. Modeling results indicated that all three of the scenarios resulted in maximum HEPA filter differential pressures well below the maximum allowable levels.« less