Presentation | 2011-06-17 Dense Ship:Virtual Machine Monitor Specialized for Server-Type Honeypot Yuhei KAWAKOYA, Makoto IWAMURA, Mitsutaka ITOH, |
---|---|
PDF Download Page | PDF download Page Link |
Abstract(in Japanese) | (See Japanese page) |
Abstract(in English) | The server-type honeypot is often used for collecting attack information and malware in the network. When many honeypot is executed as a virtual machine on one physical machine, a physical memory becomes a bottleneck and it limits the number of honeypots. To solve the bottleneck, we proposed a memory management method specialized for a server-type honeypot. This method is composed of a virtual machine management which sleeps and resumes a virtual machine instance depending on packet arrivals, a memory compression function synchronized with the packet arrivals, and a memory page sharing function which many related work have adopted. We developed a virtual machine monitor, Dense Ship which the proposal method have been implemented, and evaluated it by response time and the amount of memory consumption compared to a normal virtual machine. In this paper, we explained the design and implementation of the Dense Ship, and then indicated that the more thoneypots is able to be executed on it. |
Keyword(in Japanese) | (See Japanese page) |
Keyword(in English) | Honeypot / Virtual Machine Monitor / Memory Management / Memory Sharing / Memory Compression |
Paper # | IA2011-11,ICSS2011-11 |
Date of Issue |
Conference Information | |
Committee | IA |
---|---|
Conference Date | 2011/6/9(1days) |
Place (in Japanese) | (See Japanese page) |
Place (in English) | |
Topics (in Japanese) | (See Japanese page) |
Topics (in English) | |
Chair | |
Vice Chair | |
Secretary | |
Assistant |
Paper Information | |
Registration To | Internet Architecture(IA) |
---|---|
Language | JPN |
Title (in Japanese) | (See Japanese page) |
Sub Title (in Japanese) | (See Japanese page) |
Title (in English) | Dense Ship:Virtual Machine Monitor Specialized for Server-Type Honeypot |
Sub Title (in English) | |
Keyword(1) | Honeypot |
Keyword(2) | Virtual Machine Monitor |
Keyword(3) | Memory Management |
Keyword(4) | Memory Sharing |
Keyword(5) | Memory Compression |
1st Author's Name | Yuhei KAWAKOYA |
1st Author's Affiliation | NTT Information Sharing Platform Laboratories() |
2nd Author's Name | Makoto IWAMURA |
2nd Author's Affiliation | NTT Information Sharing Platform Laboratories |
3rd Author's Name | Mitsutaka ITOH |
3rd Author's Affiliation | NTT Information Sharing Platform Laboratories |
Date | 2011-06-17 |
Paper # | IA2011-11,ICSS2011-11 |
Volume (vol) | vol.111 |
Number (no) | 81 |
Page | pp.pp.- |
#Pages | 6 |
Date of Issue |