TSAC: ENFORCING ISOLATION OFVIRTUAL MACHINES IN CLOUDS
1. 1.
#13/ 19, 1st Floor, Municipal Colony, Kangayanellore Road, Gandhi Nagar, vellore – 6.
Off:0416-2247353 / 6066663 Mo: +91 9500218218 /8870603602,
Project Titles: http://shakastech.weebly.com/2015-2016-titles
Website: www.shakastech.com, Email - id: shakastech@gmail.com, info@shakastech.com
TSAC: ENFORCING ISOLATION OFVIRTUAL MACHINES IN CLOUDS
ABSTRACT
Virtualization plays a vital role in building the infrastructure of clouds, and isolation is
considered as one of its important features. However, we demonstrate with practical
measurements that there exist two kinds of isolation problems in current virtualized systems, due
to cache interference in a multi-core processor. That is, one virtual machine could degrade the
performance or obtain the load information of another virtual machine, which running on a same
physical machine. Then we present a time-sensitive contention management approach (TSAC)
for allocating resources dynamically in the virtual machine monitor, in which virtual machines
are controlled to share some physical resources (e.g., CPU or page color) in a dynamical manner,
in order to enforce isolation between the virtual machines without sacrificing performance of the
virtualized system. We have implemented a working prototype based on Xen, evaluated the
implemented prototype with experiments, and experimental results show that TSAC could
significantly improve isolation of virtualization. Specifically, compared to the default Xen,
TSAC could improve the performance of the victim virtual machine by up to about 78 percent,
and perform well in blocking its cache-based load information leakage.