NDLI: NoHype:virtualized cloud infrastructure without the virtualization

Content Provider	ACM Digital Library
Author	Szefer, Jakub Lee, Ruby B. Keller, Eric Rexford, Jennifer
Abstract	Cloud computing is a disruptive trend that is changing the way we use computers. The key underlying technology in cloud infrastructures is virtualization -- so much so that many consider virtualization to be one of the key features rather than simply an implementation detail. Unfortunately, the use of virtualization is the source of a significant security concern. Because multiple virtual machines run on the same server and since the virtualization layer plays a considerable role in the operation of a virtual machine, a malicious party has the opportunity to attack the virtualization layer. A successful attack would give the malicious party control over the all-powerful virtualization layer, potentially compromising the confidentiality and integrity of the software and data of any virtual machine. In this paper we propose removing the virtualization layer, while retaining the key features enabled by virtualization. Our NoHype architecture, named to indicate the removal of the hypervisor, addresses each of the key roles of the virtualization layer: arbitrating access to CPU, memory, and I/O devices, acting as a network device (e.g., Ethernet switch), and managing the starting and stopping of guest virtual machines. Additionally, we show that our NoHype architecture may indeed be "no hype" since nearly all of the needed features to realize the NoHype architecture are currently available as hardware extensions to processors and I/O devices.
Starting Page	350
Ending Page	361
Page Count	12
File Format	PDF
ISSN	01635964
DOI	10.1145/1816038.1816010
Journal	ACM SIGARCH Computer Architecture News (CARN)
Volume Number	38
Issue Number	3
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1981-04-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Cloud computing System architecture Hypervisor Many-core Multi-core Security Virtualization
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

NoHype: virtualized cloud infrastructure without the virtualization

Architectural support for hypervisor-secure virtualization (CARN, Vol. 40, Issue. 1)

Architectural support for hypervisor-secure virtualization (SIGP, Vol. 47, Issue. 4)

Architectural support for hypervisor-secure virtualization

A Network Virtualization Approach in Many-core Processor Based Cloud Computing Environment

A lightweight VMM on many core for high performance computing

A novel secure architecture of the virtualized server system

H-SVM: Hardware-Assisted Secure Virtual Machines under a Vulnerable Hypervisor

CLOUD RESOURCE VIRTUALIZATION TOWARDS SECURITY

NoHype:virtualized cloud infrastructure without the virtualization

Similar Documents

NoHype: virtualized cloud infrastructure without the virtualization

Architectural support for hypervisor-secure virtualization (CARN, Vol. 40, Issue. 1)

Architectural support for hypervisor-secure virtualization (SIGP, Vol. 47, Issue. 4)

Architectural support for hypervisor-secure virtualization

A Network Virtualization Approach in Many-core Processor Based Cloud Computing Environment

A lightweight VMM on many core for high performance computing

A novel secure architecture of the virtualized server system

H-SVM: Hardware-Assisted Secure Virtual Machines under a Vulnerable Hypervisor

CLOUD RESOURCE VIRTUALIZATION TOWARDS SECURITY

NoHype:virtualized cloud infrastructure without the virtualization