Virtual CPU Validation

被引:18
作者
Amit, Nadav [1 ]
Tsafrir, Dan [1 ]
Schuster, Assaf [1 ]
Ayoub, Ahmad [2 ]
Shlomo, Iran [2 ]
机构
[1] Technion Israel Inst Technol, Haifa, Israel
[2] Intel Corp, Santa Clara, CA 95051 USA
来源
SOSP'15: PROCEEDINGS OF THE TWENTY-FIFTH ACM SYMPOSIUM ON OPERATING SYSTEMS PRINCIPLES | 2015年
基金
以色列科学基金会;
关键词
HYPERVISOR;
D O I
10.1145/2815400.2815420
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Testing the hypervisor is important for ensuring the correct operation and security of systems, but it is a hard and challenging task. We observe, however, that the challenge is similar in many respects to that of testing real CPUs. We thus propose to apply the testing environment of CPU vendors to hypervisors. We demonstrate the advantages of our proposal by adapting Intel's testing facility to the Linux KVM hypervisor. We uncover and fix 117 bugs, six of which are security vulnerabilities. We further find four flaws in Intel virtualization technology, causing a disparity between the observable behavior of code running on virtual and bare-metal servers.
引用
收藏
页码:311 / 327
页数:17
相关论文
共 62 条
[1]  
AGESEN O., 2011, USENIX ANN TECHN C A
[2]  
ALBERTINI A, 2011, X86 ODDITIES
[3]  
Alkassar E, 2010, LECT NOTES COMPUT SC, V6217, P40, DOI 10.1007/978-3-642-15057-9_3
[4]  
AMIT N, 2015, 2 CPU CONFORMANCE IS
[5]  
AMIT N, 2014, INCREASE NUMBER FIXE
[6]  
[Anonymous], 2007, P LINUX S DTTAW DNTO
[7]  
ARCANGELI A., 2008, CERN COMP SEM
[8]  
Bailey M., 2009, EC VIRTUALIZATION MO
[9]  
Bellard Qemu F., 2005, P US 2005 ANN TECHN, V2005, P41
[10]  
Ben-Yehuda M., 2010, OSDI