| Presentation | 2011-06-17 Dense Ship:Virtual Machine Monitor Specialized for Server-Type Honeypot Yuhei KAWAKOYA, Makoto IWAMURA, Mitsutaka ITOH, |
|---|---|
| PDF Download Page |  PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | The server-type honeypot is often used for collecting attack information and malware in the network. When many honeypot is executed as a virtual machine on one physical machine, a physical memory becomes a bottleneck and it limits the number of honeypots. To solve the bottleneck, we proposed a memory management method specialized for a server-type honeypot. This method is composed of a virtual machine management which sleeps and resumes a virtual machine instance depending on packet arrivals, a memory compression function synchronized with the packet arrivals, and a memory page sharing function which many related work have adopted. We developed a virtual machine monitor, Dense Ship which the proposal method have been implemented, and evaluated it by response time and the amount of memory consumption compared to a normal virtual machine. In this paper, we explained the design and implementation of the Dense Ship, and then indicated that the more thoneypots is able to be executed on it. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | Honeypot / Virtual Machine Monitor / Memory Management / Memory Sharing / Memory Compression |
| Paper # | IA2011-11,ICSS2011-11 |
| Date of Issue |
| Conference Information | |
| Committee | ICSS |
|---|---|
| Conference Date | 2011/6/9(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Information and Communication System Security (ICSS) |
|---|---|
| Language | JPN |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Dense Ship:Virtual Machine Monitor Specialized for Server-Type Honeypot |
| Sub Title (in English) | |
| Keyword(1) | Honeypot |
| Keyword(2) | Virtual Machine Monitor |
| Keyword(3) | Memory Management |
| Keyword(4) | Memory Sharing |
| Keyword(5) | Memory Compression |
| 1st Author's Name | Yuhei KAWAKOYA |
| 1st Author's Affiliation | NTT Information Sharing Platform Laboratories() |
| 2nd Author's Name | Makoto IWAMURA |
| 2nd Author's Affiliation | NTT Information Sharing Platform Laboratories |
| 3rd Author's Name | Mitsutaka ITOH |
| 3rd Author's Affiliation | NTT Information Sharing Platform Laboratories |
| Date | 2011-06-17 |
| Paper # | IA2011-11,ICSS2011-11 |
| Volume (vol) | vol.111 |
| Number (no) | 82 |
| Page | pp.pp.- |
| #Pages | 6 |
| Date of Issue | |