KylinX

2021 ◽  
Vol 37 (1--4) ◽  
pp. 1-27
Author(s):  
Yiming Zhang ◽  
Chengfei Zhang ◽  
Yaozheng Wang ◽  
Kai Yu ◽  
Guangtao Xue ◽  
...  

Unikernel specializes a minimalistic LibOS and a target application into a standalone single-purpose virtual machine (VM) running on a hypervisor, which is referred to as (virtual) appliance . Compared to traditional VMs, Unikernel appliances have smaller memory footprint and lower overhead while guaranteeing the same level of isolation. On the downside, Unikernel strips off the process abstraction from its monolithic appliance and thus sacrifices flexibility, efficiency, and applicability. In this article, we examine whether there is a balance embracing the best of both Unikernel appliances (strong isolation) and processes (high flexibility/efficiency). We present KylinX, a dynamic library operating system for simplified and efficient cloud virtualization by providing the pVM (process-like VM) abstraction. A pVM takes the hypervisor as an OS and the Unikernel appliance as a process allowing both page-level and library-level dynamic mapping. At the page level, KylinX supports pVM fork plus a set of API for inter-pVM communication (IpC, which is compatible with conventional UNIX IPC). At the library level, KylinX supports shared libraries to be linked to a Unikernel appliance at runtime. KylinX enforces mapping restrictions against potential threats. We implement a prototype of KylinX by modifying MiniOS and Xen tools. Extensive experimental results show that KylinX achieves similar performance both in micro benchmarks (fork, IpC, library update, etc.) and in applications (Redis, web server, and DNS server) compared to conventional processes, while retaining the strong isolation benefit of VMs/Unikernels.

2013 ◽  
Vol 1 (3) ◽  
pp. 48-65
Author(s):  
Yuting Chen

A concurrent program is intuitively associated with probability: the executions of the program can produce nondeterministic execution program paths due to the interleavings of threads, whereas some paths can always be executed more frequently than the others. An exploration of the probabilities on the execution paths is expected to provide engineers or compilers with support in helping, either at coding phase or at compile time, to optimize some hottest paths. However, it is not easy to take a static analysis of the probabilities on a concurrent program in that the scheduling of threads of a concurrent program usually depends on the operating system and hardware (e.g., processor) on which the program is executed, which may be vary from machine to machine. In this paper the authors propose a platform independent approach, called ProbPP, to analyzing probabilities on the execution paths of the multithreaded programs. The main idea of ProbPP is to calculate the probabilities on the basis of two kinds of probabilities: Primitive Dependent Probabilities (PDPs) representing the control dependent probabilities among the program statements and Thread Execution Probabilities (TEPs) representing the probabilities of threads being scheduled to execute. The authors have also conducted two preliminary experiments to evaluate the effectiveness and performance of ProbPP, and the experimental results show that ProbPP can provide engineers with acceptable accuracy.


2021 ◽  
Vol 50 (1) ◽  
pp. 5-12
Author(s):  
Hani Alquhayz ◽  
Mahdi Jemmali

This paper focuses on the maximization of the minimum completion time on identical parallel processors. The objective of this maximization is to ensure fair distribution. Let a set of jobs to be assigned to several identical parallel processors. This problem is shown as NP-hard. The research work of this paper is based essentially on the comparison of the proposed heuristics with others cited in the literature review. Our heuristics are developed using essentially the randomization method and the iterative utilization of the knapsack problem to solve the studied problem. Heuristics are assessed by several instances represented in the experimental results. The results show that the knapsack based heuristic gives almost a similar performance than heuristic in a literature review but in better running time.  


Author(s):  
Mohd Zaki Mas’ud ◽  
Faizal Mohd Abdollah ◽  
Asrul Hadi Yaacob ◽  
Nazrul Muhaimin Ahmad ◽  
Erman Hamid
Keyword(s):  

2018 ◽  
pp. 638-658
Author(s):  
Li Lin ◽  
Shuang Li ◽  
Bo Li ◽  
Jing Zhan ◽  
Yong Zhao

Cloud computing has a most vulnerable security concerns as virtualization. This paper presents a Trace-enable Virtualization protection framework named TVGuarder, which protects IaaS user's important data from being illegally accessed or maliciously damaged by insider attacks. A threat model is established to characterize cloud-oriented insider attacks and countermeasures are proposed in TVGuarder. First, LSM hooks in host OS kernel are leveraged to enforce that VM images could only be accessed by host virtualization service. Second, a trusted loading mechanism is proposed to prevent tampered or disguised virtualization process from being executed in Host OS. Third, a log-based back tracing mechanism is designed to record full call trace of VM operations and guarantee that only legitimate VM operations are allowed. TVGuarder has been implemented in Openstack platform and several comprehensive experiments are conducted. Experimental results show that TVGuarder can identify several important insider attacks and protect virtual machine images with only a small performance degradation.


2019 ◽  
Vol 214 ◽  
pp. 01030
Author(s):  
Juraj Smiesko

An integrated system for data quality and conditions assessment for the ATLAS Tile Calorimeter is known amongst the ATLAS Tile Calorimeter as the Tile-in-One. It is a platform for combining all of the ATLAS Tile Calorimeter offline data quality tools in one unified web interface. It achieves this by using simple main web server to serve as central hub and group of small web applications called plugins, which provide the data quality assessment tools. Every plugin runs in its own virtual machine in order to prevent interference between the plugins and also to increase stability of the platform.


2019 ◽  
Vol 14 (2) ◽  
pp. 115-122 ◽  
Author(s):  
Ji-Yong An ◽  
Yong Zhou ◽  
Lei Zhang ◽  
Qiang Niu ◽  
Da-Fu Wang

Background: Self Interacting Proteins (SIPs) play an essential role in various aspects of the structural and functional organization of the cell. Objective: In the study, we presented a novelty sequence-based computational approach for predicting Self-interacting proteins using Weighed-Extreme Learning Machine (WELM) model combined with an Autocorrelation (AC) descriptor protein feature representation. Method: The major advantage of the proposed method mainly lies in adopting an effective feature extraction method to represent candidate self-interacting proteins by using the evolutionary information embedded in PSI-BLAST-constructed Position Specific Scoring Matrix (PSSM); and then employing a reliable and effective WELM classifier to perform classify. </P><P> Result: In order to evaluate the performance, the proposed approach is applied to yeast and human SIP datasets. The experimental results show that our method obtained 93.43% and 98.15% prediction accuracies on yeast and human dataset, respectively. Extensive experiments are carried out to compare our approach with the SVM classifier and existing sequence-based method on yeast and human dataset. Experimental results show that the performance of our method is better than several other state-of-theart methods. Conclusion: It is demonstrated that the proposed method is suitable for SIPs detection and can execute incredibly well for identifying Sips. In order to facilitate extensive studies for future proteomics research, we developed a freely available web server called WELM-AC-SIPs in Hypertext Preprocessor (PHP) for predicting SIPs. The web server including source code and the datasets are available at http://219.219.62.123:8888/WELMAC/.


2014 ◽  
Vol 530-531 ◽  
pp. 667-670
Author(s):  
Ke Ming Chen

In order to ensure that the cloud platform client runtime kernel virtual machine security, this paper proposes a new framework for dynamic monitoring of virtual machines, it is for the kernel rootkit attacks, study the cloud client virtual machine operating system kernel safety, presented Hyperchk virtual machine dynamic monitoring framework. This framework mainly for kernel rootkit attacks, ensure that customers running virtual machine kernel security.


Author(s):  
Luca Mangani ◽  
A. Andreini

This paper is aimed at showing the performances obtained with an open-source CFD code for heat transfer predictions after the addiction of specific modules. The development steps to make this code suitable for such simulations are described in order to point out its potentiality as a customizable CFD tool, appropriate for both academic and industrial research. The C++ library, named OpenFOAM, offers specific class and polyhedral finite volume operators thought for continuum mechanics simulations as well as built-in solvers and utilities. To make it robust, fast and reliable for RANS heat transfer predictions it was indeed necessary to implement additional submodules. The package coded by the authors within the OpenFOAM environment includes a suitable algorithm for compressible steady-state analysis. A SIMPLE like algorithm was specifically developed to extend the operability field to a wider range of Mach numbers. A set of Low-Reynolds eddy-viscosity turbulence models, chosen amongst the best performing in wall bounded flows, were developed. In addition an algebraic anisotropic correction, to increase jets lateral spreading, and an automatic wall treatment, to obtain mesh independence, were added. The results presented cover several types of flows amongst the most typical for turbomachinery and combustor gas turbine cooling devices. Impinging jets were investigated as well as film and effusion cooling flows, both in single and multi-hole configuration. Numerical predictions for wall effectiveness and wall heat transfer coefficient were tested against standard literature and in-house set-up experimental results. The numerical predictions obtained proves to be in-line with the equivalent models of commercial CFD packages obtaining a general good agreement with the experimental results. Moreover during the tests OpenFOAM code has shown a good accuracy and robustness, as well as an high flexibility in the implementation of user-defined submodules.


Sign in / Sign up

Export Citation Format

Share Document