CSR: Small: Detecting Flaws in Virtual Devices by Conformance Checking

CSR：小：通过一致性检查检测虚拟设备中的缺陷

• 批准号: 1319115
• 负责人: Kang Li
• 金额: $ 44.07万
• 依托单位: University of Georgia Research Foundation Inc
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-10-01 至 2017-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1319115&HistoricalAwards=false
• 关键词: CSR; Small; Detecting; Flaws; Virtual

Increasingly, all large-scale computing activities, including critical enterprise, financial, and public services, are being transitioned to cloud computing. Cloud computing is based on the technology of virtual machines, which enforces separation between the clients of a cloud service provider. Trust in cloud computing services depends on the security of the virtual machine implementation, of which virtual devices are building blocks. This project designs software tools that can automatically detect flaws in virtual device implementations, within a virtual machine platform. The inaccessible state of physical devices is represented as symbolic values in symbolic execution over the virtual device code, allowing for comparison of virtual and physical device states after subjecting each to a set of test events, without requiring measurements that interfere with the physical device state. By detecting hidden flaws and vulnerabilities in virtual devices, this project reduces the risk of potential attacks that threaten the security of virtual machines and cloud services. The release of software tools as open source allows other researchers and practitioners to build on the results. In addition, the project integrates the research with educational and outreach activities, including a new course on troubleshooting in virtualized environment, recruitment of student participants from underrepresented groups, and participation in community organizations related to information technology and security.

越来越多的大型计算活动，包括关键的企业、金融和公共服务，都正在转向云计算。云计算基于虚拟机技术，它强制云服务提供商的客户端之间分离。对云计算服务的信任取决于虚拟机实现的安全性，其中虚拟设备是构建块。该项目设计的软件工具可以在虚拟机平台内自动检测虚拟设备实现中的缺陷。物理设备的不可访问状态在虚拟设备代码上的符号执行中表示为符号值，允许在对虚拟设备和物理设备状态进行一组测试事件后对虚拟设备和物理设备状态进行比较，而不需要干扰物理设备状态的测量。通过检测虚拟设备中隐藏的缺陷和漏洞，该项目降低了威胁虚拟机和云服务安全的潜在攻击的风险。软件工具作为开源版本的发布允许其他研究人员和从业者在成果的基础上进行开发。此外，该项目还将研究与教育和外展活动相结合，包括虚拟环境中故障排除的新课程、从代表性不足的群体中招募学生参与者，以及参与与信息技术和安全相关的社区组织。