Collecting Provenance via the Xen Hypervisor Peter Macko, Marc - - PowerPoint PPT Presentation

collecting provenance via the xen hypervisor
SMART_READER_LITE
LIVE PREVIEW

Collecting Provenance via the Xen Hypervisor Peter Macko, Marc - - PowerPoint PPT Presentation

Collecting Provenance via the Xen Hypervisor Peter Macko, Marc Chiarini, Margo Seltzer Harvard SEAS TaPP '11 What We're Doing Provenance-Aware Storage Systems Group Modified Linux Kernel Captures rich relationships between


slide-1
SLIDE 1

Collecting Provenance via the Xen Hypervisor

Peter Macko, Marc Chiarini, Margo Seltzer Harvard SEAS TaPP '11

slide-2
SLIDE 2

What We're Doing

  • Provenance-Aware

Storage Systems Group

  • Modified Linux

Kernel

  • Captures rich

relationships between files, pipes, processes.

slide-3
SLIDE 3

A Problem

  • Maintaining the provenance interceptor is

unsustainable.

  • Need a way of collecting system-level

provenance that is:

– easier to maintain. – more portable. – more likely to be adopted.

  • Helps the development effort (find bugs, etc)!
slide-4
SLIDE 4

Our Approach

  • Collect the same kind
  • f system-level

provenance from virtual machines running under the Xen Hypervisor.

Dom0 DomU Guest (PV) Xen Mgmt Interface Emulated Devices Device Drivers Backend Drivers Frontend Drivers vCPU vMem Scheduler DomU Guest (HVM) Device Drivers Applications Xen Hypervisor CPU Memory Network Physical Hardware Applications Blk Devs

Hypercalls

slide-5
SLIDE 5

Challenges

  • Potential performance impact?
  • Where to store provenance?
  • How to extract provenance that is not

available via system call from guest memory?

  • How to extend to other guest OSes?
slide-6
SLIDE 6

Questions?

Prototype will be available in late summer 2011. http://www.eecs.harvard.edu/syrah/pass/ chiarini@seas.harvard.edu