XenRPC安全的虚拟机远程过程调用设计与实现.pdfVIP

计算机研究与发展 ISSN lOOO-lZ39/CN 11-l7ì7/TP Journal of Computer Research and Development 49(5): 996-1004 , 2012 XenRPC: 安全的虚拟机远程过程调用设计与实现 陈浩彭革芬孙建华石林 (湖南大学信息科学与工程学院 长沙 410082) (haochen( aimlab. org) XenRPC : Design and Implementation of Security VM Remote Procedure Call Chen Hao , Peng Cuifen, Sun lianhua , and Shi Lin (Schoolof lnformation Science and EngineerinJ HUllan University , Chrmgsha 410082) Abstract In virtual machine environment, VMs often need to communicate with each other, but the fact is that the VMs are actually in the same physical machine. The existed remote procedure call mechanisms do not suit for virtual machine environment. In this paper, an Xen-specific remote procedure , call mechanìsm named XenRPC is presented. XenRPC uses the interfaces provided by XenAccess and the eve口 t channel mechanism provided by Xen, to share memory between the two communicating processes. XenRPC removes the marshalling while data packets are sent, triggers an immediate context switching , and notifies events asynchronously through event channel to greatly enhance the communication performance. In addition, to avoid stack overflow attacks , XenRPC protects th巳 memory shared and chccks the return address of the shared stack. H the return address is modified by the malicious program , XenRPC will recover the return address to protect users from the stack overflow attacks. Performance evaluations show that the throughput , latency and CPU consumption of XenRPC are better than that of SunRPC and Ice , which are the two well-known remote procedure cal1 mechanisms. Key words Xen; XenRPC; remote proceòure call; sharcd memory; stack overflow 摘要虚拟机环境下进行通信的操作系统实际处于同一物理机器上，而当前的远程过程调用机制没有 考虑虚拟机这个环境.针对这一问题.在