English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Monitoring kernel object modification of virtual machine is widely used byvirtual-machine-introspection-based security monitors to protect virtualmachines in cloud computing, such as monitoring dentry objects to interceptfile operations, etc. However, most of the current virtual machine monitors,such as KVM and Xen, only support page-level monitoring, because the Intel EPTtechnology can only monitor page privilege. If the out-of-virtual-machinesecurity tools want to monitor some kernel objects, they need to intercept theoperation of the whole memory page. Since there are some other objects storedin the monitored pages, the modification of them will also trigger the monitor.Therefore, page-level memory monitor usually introduces overhead to relatedkernel services of the target virtual machine. In this paper, we propose alow-overhead kernel object monitoring approach to reduce the overhead caused bypage-level monitor. The core idea is to migrate the target kernel objects to aprotected memory area and then to monitor the corresponding new memory pages.Since the new pages only contain the kernel objects to be monitored, otherkernel objects will not trigger our monitor. Therefore, our monitor will notintroduce runtime overhead to the related kernel service. The experimentalresults show that our system can monitor target kernel objects effectively onlywith very low overhead.

A Low-overhead Kernel Object Monitoring Approach for Virtual Machine Introspection