CSR: Small: Detecting Flaws in Virtual Devices by Conformance Checking

CSR：小：通过一致性检查检测虚拟设备中的缺陷

• 批准号: 1319115
• 负责人: Kang Li
• 金额: $ 44.07万
• 依托单位: University of Georgia Research Foundation Inc
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-10-01 至 2017-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1319115&HistoricalAwards=false
• 关键词: CSR; Small; Detecting; Flaws; Virtual

Increasingly, all large-scale computing activities, including critical enterprise, financial, and public services, are being transitioned to cloud computing. Cloud computing is based on the technology of virtual machines, which enforces separation between the clients of a cloud service provider. Trust in cloud computing services depends on the security of the virtual machine implementation, of which virtual devices are building blocks. This project designs software tools that can automatically detect flaws in virtual device implementations, within a virtual machine platform. The inaccessible state of physical devices is represented as symbolic values in symbolic execution over the virtual device code, allowing for comparison of virtual and physical device states after subjecting each to a set of test events, without requiring measurements that interfere with the physical device state. By detecting hidden flaws and vulnerabilities in virtual devices, this project reduces the risk of potential attacks that threaten the security of virtual machines and cloud services. The release of software tools as open source allows other researchers and practitioners to build on the results. In addition, the project integrates the research with educational and outreach activities, including a new course on troubleshooting in virtualized environment, recruitment of student participants from underrepresented groups, and participation in community organizations related to information technology and security.

越来越多的大规模计算活动，包括关键企业，财务和公共服务，都将过渡到云计算。云计算基于虚拟机的技术，该技术可以在云服务提供商的客户端之间进行分离。对云计算服务的信任取决于虚拟机实现的安全性，虚拟设备是构建块。该项目设计的软件工具可以在虚拟机平台中自动检测虚拟设备实现中的缺陷。在虚拟设备代码上，物理设备的无法访问状态表示为符号值，在对每个测试事件进行一组测试事件之后，可以比较虚拟设备代码，而无需干扰物理设备状态的测量值。通过检测虚拟设备中隐藏的缺陷和漏洞，该项目降低了威胁虚拟机和云服务安全的潜在攻击风险。将软件工具作为开源的发布允许其他研究人员和从业人员在结果基础上建立。此外，该项目将研究与教育和外展活动相结合，包括在虚拟化环境中进行故障排除的新课程，从代表性不足的群体中招募学生参与者以及参与与信息技术和安全性有关的社区组织。