Confining Windows Inter-Process Communications for OS-Level Virtual Machine

by   Zhiyong Shan, et al.

As OS-level virtualization technology usually imposes little overhead on virtual machine start-up and running, it provides an excellent choice for building intrusion/fault tolerant applications that require redundancy and frequent invocation. When developing Windows OS-level virtual machine, however, people will inevitably face the challenge of confining Windows Inter-Process Communications (IPC). As IPC on Windows platform is more complex than UNIX style OS and most of the programs on Windows are not open-source, it is difficult to discover all of the performed IPCs and confine them. In this paper, we propose three general principles to confine IPC on Windows OS and a novel IPC confinement mechanism based on the principles. With the mechanism, for the first time from the literature, we successfully virtualized RPC System Service (RPCSS) and Internet Information Server (IIS) on Feather-weight Virtual Machine (FVM). Experimental results demonstrate that multiple IIS web server instances can simultaneously run on single Windows OS with much less performance overhead than other popular VM technology, offering a good basis for constructing dependable system.



There are no comments yet.


page 1

page 2

page 3

page 4


Virtualizing System and Ordinary Services in Windows-based OS-Level Virtual Machines

OS-level virtualization incurs smaller start-up and run-time overhead th...

Duplication of Windows Services

OS-level virtualization techniques virtualize system resources at the sy...

Interactive Launch of 16,000 Microsoft Windows Instances on a Supercomputer

Simulation, machine learning, and data analysis require a wide range of ...

Significance of Episodes Based on Minimal Windows

Discovering episodes, frequent sets of events from a sequence has been a...

Railgun: streaming windows for mission critical systems

Some mission critical systems, such as fraud detection, require accurate...

Railgun: managing large streaming windows under MAD requirements

Some mission critical systems, e.g., fraud detection, require accurate, ...

Design of moveable and resizable graphics

We are communicating with computers on two different levels. On upper le...
This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.