The Experts below are selected from a list of 139533 Experts worldwide ranked by ideXlab platform

Benoit Hudzia - One of the best experts on this subject based on the ideXlab platform.

  • Pre-Copy and Post-Copy VM Live Migration for Memory Intensive Applications
    Euro-Par 2012: Parallel Processing Workshops, 2013
    Co-Authors: Aidan Shribman, Benoit Hudzia
    Abstract:

    Virtualization technology provides a means for server consolidation, reducing the number of physical servers required for running a given workload. Virtual Machine (VM) live migration facilitates the transfer of a running (VM) between physical hosts while appearing transparent to the running Application. Memory intensive Applications tend to obstruct the original pre-copy live migration process and may result in the failure of the migration process due to its inability to transfer Memory faster than Memory is dirtied by the running Application. The focus of this paper is to present several techniques that can be applied to both pre-copy live migration and post-copy live migration to better support migration of Memory intensive Applications.

  • Euro-Par Workshops - Pre-Copy and post-copy VM live migration for Memory intensive Applications
    Lecture Notes in Computer Science, 2013
    Co-Authors: Aidan Shribman, Benoit Hudzia
    Abstract:

    Virtualization technology provides a means for server consolidation, reducing the number of physical servers required for running a given workload. Virtual Machine (VM) live migration facilitates the transfer of a running (VM) between physical hosts while appearing transparent to the running Application. Memory intensive Applications tend to obstruct the original pre-copy live migration process and may result in the failure of the migration process due to its inability to transfer Memory faster than Memory is dirtied by the running Application. The focus of this paper is to present several techniques that can be applied to both pre-copy live migration and post-copy live migration to better support migration of Memory intensive Applications.

Aidan Shribman - One of the best experts on this subject based on the ideXlab platform.

  • Pre-Copy and Post-Copy VM Live Migration for Memory Intensive Applications
    Euro-Par 2012: Parallel Processing Workshops, 2013
    Co-Authors: Aidan Shribman, Benoit Hudzia
    Abstract:

    Virtualization technology provides a means for server consolidation, reducing the number of physical servers required for running a given workload. Virtual Machine (VM) live migration facilitates the transfer of a running (VM) between physical hosts while appearing transparent to the running Application. Memory intensive Applications tend to obstruct the original pre-copy live migration process and may result in the failure of the migration process due to its inability to transfer Memory faster than Memory is dirtied by the running Application. The focus of this paper is to present several techniques that can be applied to both pre-copy live migration and post-copy live migration to better support migration of Memory intensive Applications.

  • Euro-Par Workshops - Pre-Copy and post-copy VM live migration for Memory intensive Applications
    Lecture Notes in Computer Science, 2013
    Co-Authors: Aidan Shribman, Benoit Hudzia
    Abstract:

    Virtualization technology provides a means for server consolidation, reducing the number of physical servers required for running a given workload. Virtual Machine (VM) live migration facilitates the transfer of a running (VM) between physical hosts while appearing transparent to the running Application. Memory intensive Applications tend to obstruct the original pre-copy live migration process and may result in the failure of the migration process due to its inability to transfer Memory faster than Memory is dirtied by the running Application. The focus of this paper is to present several techniques that can be applied to both pre-copy live migration and post-copy live migration to better support migration of Memory intensive Applications.

Mani Srivastava - One of the best experts on this subject based on the ideXlab platform.

  • harbor software based Memory protection for sensor nodes
    Information Processing in Sensor Networks, 2007
    Co-Authors: Ram Kumar, Eddie Kohler, Mani Srivastava
    Abstract:

    Many sensor nodes contain resource constrained microcontrollers where user level Applications, operating system components, and device drivers share a single address space with no form of hardware Memory protection. Programming errors in one Application can easily corrupt the state of the operating system or other Applications. In this paper, we propose Harbor, a Memory protection system that prevents many forms of Memory corruption. We use software based fault isolation ("sandboxing") to restrict Application Memory accesses and control flow to protection domains within the address space. A flexible and efficient Memory map data structure records ownership and layout information for Memory regions; writes are validated using the Memory map. Control flow integrity is preserved by maintaining a safe stack that stores return addresses in a protected Memory region. Run-time checks validate computed control flow instructions. Cross domain calls perform low-overhead control transfers between domains. Checks are introduced by rewriting an Application's compiled binary. The sand- boxed result is verified on the sensor node before it is admitted for execution. Harbor's fault isolation properties depend only on the correctness of this verifier and the Harbor runtime. We have implemented and tested Harbor on the SOS operating system. Harbor detected and prevented Memory corruption caused by programming errors in Application modules that had been in use for several months. Harbor's overhead, though high, is less than that of Application-specific virtual machines, and reasonable for typical sensor workloads.

  • IPSN - Harbor: software-based Memory protection for sensor nodes
    Proceedings of the 6th international conference on Information processing in sensor networks - IPSN '07, 2007
    Co-Authors: Ram Kumar, Eddie Kohler, Mani Srivastava
    Abstract:

    Many sensor nodes contain resource constrained microcontrollers where user level Applications, operating system components, and device drivers share a single address space with no form of hardware Memory protection. Programming errors in one Application can easily corrupt the state of the operating system or other Applications. In this paper, we propose Harbor, a Memory protection system that prevents many forms of Memory corruption. We use software based fault isolation ("sandboxing") to restrict Application Memory accesses and control flow to protection domains within the address space. A flexible and efficient Memory map data structure records ownership and layout information for Memory regions; writes are validated using the Memory map. Control flow integrity is preserved by maintaining a safe stack that stores return addresses in a protected Memory region. Run-time checks validate computed control flow instructions. Cross domain calls perform low-overhead control transfers between domains. Checks are introduced by rewriting an Application's compiled binary. The sand- boxed result is verified on the sensor node before it is admitted for execution. Harbor's fault isolation properties depend only on the correctness of this verifier and the Harbor runtime. We have implemented and tested Harbor on the SOS operating system. Harbor detected and prevented Memory corruption caused by programming errors in Application modules that had been in use for several months. Harbor's overhead, though high, is less than that of Application-specific virtual machines, and reasonable for typical sensor workloads.

N. Kosmatov - One of the best experts on this subject based on the ideXlab platform.

  • Shadow state encoding for efficient monitoring of block-level properties
    2017
    Co-Authors: K. Vorobyov, J. Signoles, N. Kosmatov
    Abstract:

    Memory shadowing associates addresses from an Application's Memory to values stored in a disjoint Memory space called shadow Memory. At runtime shadow values store metadata about Application Memory locations they are mapped to. Shadow state encodings -The structure of shadow values and their interpretation - vary across different tools. Encodings used by the state-of-The-Art monitoring tools have been proven useful for tracking Memory at a byte-level, but cannot address properties related to Memory block boundaries. Tracking block boundaries is however crucial for spatial Memory safety analysis, where a spatial violation such as outof- bounds access, may dereference an allocated location belonging to an adjacent block or a different struct member. This paper describes two novel shadow state encodings which capture block-boundary-related properties. These encodings have been implemented in E-ACSL -A runtime verification tool for C programs. Initial experiments involving checking validity of pointer and array accesses in computationally intensive runs of programs selected from SPEC CPU benchmarks demonstrate runtime and Memory overheads comparable to state-of-The-Art Memory debuggers.

  • ISMM - Shadow state encoding for efficient monitoring of block-level properties
    Proceedings of the 2017 ACM SIGPLAN International Symposium on Memory Management, 2017
    Co-Authors: K. Vorobyov, J. Signoles, N. Kosmatov
    Abstract:

    Memory shadowing associates addresses from an Application's Memory to values stored in a disjoint Memory space called shadow Memory. At runtime shadow values store metadata about Application Memory locations they are mapped to. Shadow state encodings -- the structure of shadow values and their interpretation -- vary across different tools. Encodings used by the state-of-the-art monitoring tools have been proven useful for tracking Memory at a byte-level, but cannot address properties related to Memory block boundaries. Tracking block boundaries is however crucial for spatial Memory safety analysis, where a spatial violation such as out-of-bounds access, may dereference an allocated location belonging to an adjacent block or a different struct member. This paper describes two novel shadow state encodings which capture block-boundary-related properties. These encodings have been implemented in E-ACSL - a runtime verification tool for C programs. Initial experiments involving checking validity of pointer and array accesses in computationally intensive runs of programs selected from SPEC CPU benchmarks demonstrate runtime and Memory overheads comparable to state-of-the-art Memory debuggers.

Ram Kumar - One of the best experts on this subject based on the ideXlab platform.

  • harbor software based Memory protection for sensor nodes
    Information Processing in Sensor Networks, 2007
    Co-Authors: Ram Kumar, Eddie Kohler, Mani Srivastava
    Abstract:

    Many sensor nodes contain resource constrained microcontrollers where user level Applications, operating system components, and device drivers share a single address space with no form of hardware Memory protection. Programming errors in one Application can easily corrupt the state of the operating system or other Applications. In this paper, we propose Harbor, a Memory protection system that prevents many forms of Memory corruption. We use software based fault isolation ("sandboxing") to restrict Application Memory accesses and control flow to protection domains within the address space. A flexible and efficient Memory map data structure records ownership and layout information for Memory regions; writes are validated using the Memory map. Control flow integrity is preserved by maintaining a safe stack that stores return addresses in a protected Memory region. Run-time checks validate computed control flow instructions. Cross domain calls perform low-overhead control transfers between domains. Checks are introduced by rewriting an Application's compiled binary. The sand- boxed result is verified on the sensor node before it is admitted for execution. Harbor's fault isolation properties depend only on the correctness of this verifier and the Harbor runtime. We have implemented and tested Harbor on the SOS operating system. Harbor detected and prevented Memory corruption caused by programming errors in Application modules that had been in use for several months. Harbor's overhead, though high, is less than that of Application-specific virtual machines, and reasonable for typical sensor workloads.

  • IPSN - Harbor: software-based Memory protection for sensor nodes
    Proceedings of the 6th international conference on Information processing in sensor networks - IPSN '07, 2007
    Co-Authors: Ram Kumar, Eddie Kohler, Mani Srivastava
    Abstract:

    Many sensor nodes contain resource constrained microcontrollers where user level Applications, operating system components, and device drivers share a single address space with no form of hardware Memory protection. Programming errors in one Application can easily corrupt the state of the operating system or other Applications. In this paper, we propose Harbor, a Memory protection system that prevents many forms of Memory corruption. We use software based fault isolation ("sandboxing") to restrict Application Memory accesses and control flow to protection domains within the address space. A flexible and efficient Memory map data structure records ownership and layout information for Memory regions; writes are validated using the Memory map. Control flow integrity is preserved by maintaining a safe stack that stores return addresses in a protected Memory region. Run-time checks validate computed control flow instructions. Cross domain calls perform low-overhead control transfers between domains. Checks are introduced by rewriting an Application's compiled binary. The sand- boxed result is verified on the sensor node before it is admitted for execution. Harbor's fault isolation properties depend only on the correctness of this verifier and the Harbor runtime. We have implemented and tested Harbor on the SOS operating system. Harbor detected and prevented Memory corruption caused by programming errors in Application modules that had been in use for several months. Harbor's overhead, though high, is less than that of Application-specific virtual machines, and reasonable for typical sensor workloads.