Abstract — This paper outlines the recent work by the author to design and develop a backdoor for machines running the Xen hypervisor. An attacker can gain backdoor control over the host by overwriting Xen code and data structures; as not a single byte in dom0 domain is modified, the detection

(Article begins on next page) The Harvard community has made this article openly available. Please share how this access benefits you. Your story matters.

Servers workload varies during time and they have to be able to support the maximum load rate during a day, hence, they are idle many time wating resources. A solu-tion to avoid this situation is having different servers with different workloads in the same computer in an isolated en-vironment and it can be achieved with virtualization. Virtualization maximizes resources usage, nevertheless, virtual machines just competing for system resources is not a good solution in the real world. Providers needs to specify levels of service agreements with their users, like how many CPU percentage is guaranteed. In this case, introducing a manager that monitors resources usage and reallocates resources according to system load is necessary. In this ar-ticle, how many overhead introduces an external manager respect native virtual machine scheduling will be studied. If an application is underusing assigned resources, man-ager will reassign remaining resources between saturated applications taking into account SLAs.

Virtualization technology enables server consolidation and has given an impetus to low-cost green data centers. However, current hypervisors do not provide adequate support for real-time applications, and this has limited the adoption of virtualization in some domains. Soft real-time applications

In this technical report1, we describe how to enable live cloning [5] of virtual machines (VMs) with the help of the the Xen hypervisor [1]. In particular, we describe several modifications of the hypervisor’s code to enable live cloning of running VM’s and we show how to manage the cloned VM

of individual virtual machines on multi-core processors with Xen hypervisor, to enhance the performance isolation among virtual machines and improve the timing predictability of real-time applications. Experiments with the SPEC2006 benchmark programs are conducted to validate the proposed method. I.

Abstract—In this paper, we introduce Collabra, a distributed intrusion detection platform based on Xen hypervisors to maintain the security of the cloud based on virtualized network. While the concept of virtual machine monitor (VMM) signifies implementing an abstraction layer between

should be isolated from each other. In this paper we present, as an improvement to the initial implementation, again a double-OS system running, on a dual-core platform, ERIKA Enterprise and a full-featured Linux OS, but using the Xen hypervisor to run the two operating systems in two isolated domains

of critical tasks. We implemented the throttling framework on Xen Hypervisor and evaluated the overall isolating performance with a set of benchmarks. The results prove the effectiveness of our design.

Mobile phones became the prevailing application in embedded devices. As its market is getting bigger, its security is becoming an important issues. Xen as a virtualization technology could be one of its solutions with domain protection mechanism. Recently, Xen community released the interesting