首页 > 最新文献

2012 IEEE Fifth International Conference on Cloud Computing最新文献

英文 中文
Keeping Data Private while Computing in the Cloud 在云计算中保持数据的私密性
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.126
Yuriy Brun, N. Medvidović
The cloud offers unprecedented access to computation. However, ensuring the privacy of that computation remains a significant challenge. In this paper, we address the problem of distributing computation onto the cloud in a way that preserves the privacy of the computation's data even from the cloud nodes themselves. The approach, called sTile, separates the computation into small subcomputations and distributes them in a way that makes it prohibitively hard to reconstruct the data. We evaluate sTile theoretically and empirically: First, we formally prove that sTile systems preserve privacy. Second, we deploy a prototype implementation on three different networks, including the globally-distributed PlanetLab testbed, to show that sTile is robust to network delay and efficient enough to significantly outperform existing privacy-preserving approaches.
云计算提供了前所未有的计算能力。然而,确保计算的私密性仍然是一个重大挑战。在本文中,我们解决了将计算分布到云上的问题,这种方式甚至可以保护来自云节点本身的计算数据的隐私。这种方法被称为sTile,它将计算分成小的子计算,并以一种难以重构数据的方式分布它们。我们从理论上和经验上对sTile进行了评估:首先,我们正式证明了sTile系统保护隐私。其次,我们在三个不同的网络上部署了一个原型实现,包括全球分布式的PlanetLab测试平台,以表明sTile对网络延迟具有鲁棒性,并且足够高效,显著优于现有的隐私保护方法。
{"title":"Keeping Data Private while Computing in the Cloud","authors":"Yuriy Brun, N. Medvidović","doi":"10.1109/CLOUD.2012.126","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.126","url":null,"abstract":"The cloud offers unprecedented access to computation. However, ensuring the privacy of that computation remains a significant challenge. In this paper, we address the problem of distributing computation onto the cloud in a way that preserves the privacy of the computation's data even from the cloud nodes themselves. The approach, called sTile, separates the computation into small subcomputations and distributes them in a way that makes it prohibitively hard to reconstruct the data. We evaluate sTile theoretically and empirically: First, we formally prove that sTile systems preserve privacy. Second, we deploy a prototype implementation on three different networks, including the globally-distributed PlanetLab testbed, to show that sTile is robust to network delay and efficient enough to significantly outperform existing privacy-preserving approaches.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129037721","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 26
Efficient Deployment of Main-Memory DBMS in Virtualized Data Centers 主存DBMS在虚拟化数据中心中的高效部署
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.13
Michael Seibold, A. Wolke, Martina-Cezara Albutiu, M. Bichler, A. Kemper, Thomas Setzer
Running emerging main-memory database systems within virtual machines causes huge overhead, because these systems are highly optimized to get the most out of bare metal servers. But running these systems on bare metal servers results in low resource utilization, because database servers often have to be sized for peak loads, much higher than the average load. Instead, we propose to deploy them within light-weight containers that allow to control resource usage and to make use of spare resources by temporarily running other applications on the database server using virtual machines (VMs). The servers on which these VMs would normally run can be suspended, to save energy costs. But current database systems do not handle dynamic changes to resource allocation well and accurate estimates on resource demand are required to maintain SLAs. We focus on emerging main-memory database systems that support the mixed workloads of today's business intelligence applications and propose an cooperative approach in which the DBMS communicates its resource demand, gets informed about currently assigned resources and adapts its resource usage accordingly. We analyze the performance impact on the database system when spare resources are used by VMs and monitor SLA compliance.
在虚拟机中运行新兴的主内存数据库系统会导致巨大的开销,因为这些系统经过了高度优化,可以最大限度地利用裸机服务器。但是,在裸机服务器上运行这些系统会导致资源利用率低,因为数据库服务器通常必须根据峰值负载(远高于平均负载)调整大小。相反,我们建议将它们部署在轻量级容器中,这样可以控制资源使用,并通过使用虚拟机(vm)在数据库服务器上临时运行其他应用程序来利用空闲资源。这些虚拟机通常运行的服务器可以挂起,以节省能源成本。但是,当前的数据库系统不能很好地处理资源分配的动态变化,维护sla需要对资源需求进行准确的估计。我们将重点放在支持当今商业智能应用程序的混合工作负载的新兴主存数据库系统上,并提出一种协作方法,在这种方法中,DBMS可以传达其资源需求,了解当前分配的资源并相应地调整其资源使用。我们分析空闲资源被虚拟机使用时对数据库系统的性能影响,并监控SLA遵从性。
{"title":"Efficient Deployment of Main-Memory DBMS in Virtualized Data Centers","authors":"Michael Seibold, A. Wolke, Martina-Cezara Albutiu, M. Bichler, A. Kemper, Thomas Setzer","doi":"10.1109/CLOUD.2012.13","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.13","url":null,"abstract":"Running emerging main-memory database systems within virtual machines causes huge overhead, because these systems are highly optimized to get the most out of bare metal servers. But running these systems on bare metal servers results in low resource utilization, because database servers often have to be sized for peak loads, much higher than the average load. Instead, we propose to deploy them within light-weight containers that allow to control resource usage and to make use of spare resources by temporarily running other applications on the database server using virtual machines (VMs). The servers on which these VMs would normally run can be suspended, to save energy costs. But current database systems do not handle dynamic changes to resource allocation well and accurate estimates on resource demand are required to maintain SLAs. We focus on emerging main-memory database systems that support the mixed workloads of today's business intelligence applications and propose an cooperative approach in which the DBMS communicates its resource demand, gets informed about currently assigned resources and adapts its resource usage accordingly. We analyze the performance impact on the database system when spare resources are used by VMs and monitor SLA compliance.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129554060","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
QoS-Driven Service Selection for Multi-tenant SaaS 多租户SaaS的qos驱动服务选择
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.125
Qiang He, Jun Han, Yun Yang, J. Grundy, Hai Jin
Cloud-based software applications (Software as a Service - SaaS) for multi-tenant provisioning have become a major development paradigm in Web engineering. Instead of serving a single end-user, a multi-tenant SaaS provides multiple end-users with the same functionality but with potentially different quality-of-service (QoS) values. The service selection for such a SaaS is a complex decision-making process which involves a number of stakeholders with different QoS requirements. SaaS developers need to compose services with different QoS values to meet end-users' different multidimensional QoS constraints for the SaaS. Furthermore, they also need to satisfy SaaS providers' optimisation goals for the SaaS, such as least resource cost and best system performance. Existing QoS-aware service selection approaches are oriented at a single tenant. They do not consider the characteristics of multi-tenant SaaS and hence are ineffective and inefficient when applied to compose multi-tenant SaaS. In this paper, we introduce a novel QoS-driven approach for helping SaaS developers select the services for composing multi-tenant SaaS, which achieves SaaS providers' optimisation goals while fulfilling the end-users' different levels of QoS constraints. The proposed approach is evaluated using an example SaaS synthetically generated based on a dataset of real-world Web services. Experimental results show that our approach significantly outperforms existing approaches in terms of both effectiveness and performance.
用于多租户供应的基于云的软件应用程序(软件即服务—SaaS)已经成为Web工程中的主要开发范例。多租户SaaS不是为单个最终用户提供服务,而是为多个最终用户提供相同的功能,但可能具有不同的服务质量(QoS)值。这种SaaS的服务选择是一个复杂的决策过程,涉及许多具有不同QoS需求的涉众。SaaS开发人员需要组合具有不同QoS值的服务,以满足最终用户对SaaS的不同多维QoS约束。此外,他们还需要满足SaaS提供商对SaaS的优化目标,例如最小的资源成本和最佳的系统性能。现有的支持qos的服务选择方法是面向单个租户的。它们没有考虑多租户SaaS的特征,因此在应用于组成多租户SaaS时是无效和低效的。在本文中,我们介绍了一种新的QoS驱动方法,用于帮助SaaS开发人员选择用于组成多租户SaaS的服务,该方法在满足最终用户不同级别的QoS约束的同时实现了SaaS提供商的优化目标。使用基于真实Web服务数据集合成的示例SaaS来评估所建议的方法。实验结果表明,我们的方法在有效性和性能方面都明显优于现有的方法。
{"title":"QoS-Driven Service Selection for Multi-tenant SaaS","authors":"Qiang He, Jun Han, Yun Yang, J. Grundy, Hai Jin","doi":"10.1109/CLOUD.2012.125","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.125","url":null,"abstract":"Cloud-based software applications (Software as a Service - SaaS) for multi-tenant provisioning have become a major development paradigm in Web engineering. Instead of serving a single end-user, a multi-tenant SaaS provides multiple end-users with the same functionality but with potentially different quality-of-service (QoS) values. The service selection for such a SaaS is a complex decision-making process which involves a number of stakeholders with different QoS requirements. SaaS developers need to compose services with different QoS values to meet end-users' different multidimensional QoS constraints for the SaaS. Furthermore, they also need to satisfy SaaS providers' optimisation goals for the SaaS, such as least resource cost and best system performance. Existing QoS-aware service selection approaches are oriented at a single tenant. They do not consider the characteristics of multi-tenant SaaS and hence are ineffective and inefficient when applied to compose multi-tenant SaaS. In this paper, we introduce a novel QoS-driven approach for helping SaaS developers select the services for composing multi-tenant SaaS, which achieves SaaS providers' optimisation goals while fulfilling the end-users' different levels of QoS constraints. The proposed approach is evaluated using an example SaaS synthetically generated based on a dataset of real-world Web services. Experimental results show that our approach significantly outperforms existing approaches in terms of both effectiveness and performance.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114282134","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 83
Biting Off Safely More Than You Can Chew: Predictive Analytics for Resource Over-Commit in IaaS Cloud 在IaaS云环境中,为资源过度使用提供预测分析
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.131
R. Ghosh, V. Naik
Cloud service providers are constantly looking for ways to increase revenue and reduce costs either by reducing capacity requirements or by supporting more users without adding capacity. Over-commit of physical resources, without adding more capacity, is one such approach. Workloads that tend to be 'peaky' are especially attractive targets for over-commit since only occasionally such workloads use all the system resources that they are entitled to. Online identification of candidate workloads and quantification of risks are two key issues associated with over-committing resources. In this paper, to estimate the risks associated with over-commit, we describe a mechanism based on the statistical analysis of the aggregate resource usage behavior of a group of workloads. Using CPU usage data collected from an internal private Cloud, we show that our proposed approach is effective and practical.
云服务提供商一直在寻找增加收入和降低成本的方法,要么减少容量需求,要么在不增加容量的情况下支持更多用户。过度使用物理资源而不增加更多容量就是这样一种方法。趋向于“峰值”的工作负载是过度提交的特别有吸引力的目标,因为这些工作负载只是偶尔使用它们有权使用的所有系统资源。候选工作负载的在线识别和风险的量化是与过度使用资源相关的两个关键问题。在本文中,为了估计与过度提交相关的风险,我们描述了一种基于对一组工作负载的总资源使用行为的统计分析的机制。使用从内部私有云收集的CPU使用数据,我们证明了我们提出的方法是有效和实用的。
{"title":"Biting Off Safely More Than You Can Chew: Predictive Analytics for Resource Over-Commit in IaaS Cloud","authors":"R. Ghosh, V. Naik","doi":"10.1109/CLOUD.2012.131","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.131","url":null,"abstract":"Cloud service providers are constantly looking for ways to increase revenue and reduce costs either by reducing capacity requirements or by supporting more users without adding capacity. Over-commit of physical resources, without adding more capacity, is one such approach. Workloads that tend to be 'peaky' are especially attractive targets for over-commit since only occasionally such workloads use all the system resources that they are entitled to. Online identification of candidate workloads and quantification of risks are two key issues associated with over-committing resources. In this paper, to estimate the risks associated with over-commit, we describe a mechanism based on the statistical analysis of the aggregate resource usage behavior of a group of workloads. Using CPU usage data collected from an internal private Cloud, we show that our proposed approach is effective and practical.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117156779","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 66
IncMR: Incremental Data Processing Based on MapReduce IncMR:基于MapReduce的增量数据处理
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.67
Cairong Yan, Xin Yang, Ze Yu, Min Li, Xiaolin Li
MapReduce programming model is widely used for large scale and one-time data-intensive distributed computing, but lacks flexibility and efficiency of processing small incremental data. IncMR framework is proposed in this paper for incrementally processing new data of a large data set, which takes state as implicit input and combines it with new data. Map tasks are created according to new splits instead of entire splits while reduce tasks fetch their inputs including the state and the intermediate results of new map tasks from designate nodes or local nodes. Data locality is considered as one of the main optimization means for job scheduling. It is implemented based on Hadoop, compatible with the original MapReduce interfaces and transparent to users. Experiments show that non-iterative algorithms running in MapReduce framework can be migrated to IncMR directly to get efficient incremental and continuous processing without any modification. IncMR is competitive and in all studied cases runs faster than that processing the entire data set.
MapReduce编程模型广泛应用于大规模、一次性数据密集型的分布式计算,但在处理少量增量数据时缺乏灵活性和效率。本文提出了一种以状态为隐式输入并与新数据相结合的增量处理大数据集新数据的IncMR框架。Map任务是根据新的分割而不是整个分割创建的,而reduce任务从指定节点或本地节点获取其输入,包括新Map任务的状态和中间结果。数据局部性被认为是作业调度的主要优化手段之一。它基于Hadoop实现,兼容原有MapReduce接口,对用户透明。实验表明,在MapReduce框架下运行的非迭代算法可以直接迁移到IncMR中,无需任何修改即可获得高效的增量和连续处理。IncMR是有竞争力的,在所有研究的案例中,它比处理整个数据集的速度都要快。
{"title":"IncMR: Incremental Data Processing Based on MapReduce","authors":"Cairong Yan, Xin Yang, Ze Yu, Min Li, Xiaolin Li","doi":"10.1109/CLOUD.2012.67","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.67","url":null,"abstract":"MapReduce programming model is widely used for large scale and one-time data-intensive distributed computing, but lacks flexibility and efficiency of processing small incremental data. IncMR framework is proposed in this paper for incrementally processing new data of a large data set, which takes state as implicit input and combines it with new data. Map tasks are created according to new splits instead of entire splits while reduce tasks fetch their inputs including the state and the intermediate results of new map tasks from designate nodes or local nodes. Data locality is considered as one of the main optimization means for job scheduling. It is implemented based on Hadoop, compatible with the original MapReduce interfaces and transparent to users. Experiments show that non-iterative algorithms running in MapReduce framework can be migrated to IncMR directly to get efficient incremental and continuous processing without any modification. IncMR is competitive and in all studied cases runs faster than that processing the entire data set.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"102 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117297848","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 45
Admission Control for Elastic Cloud Services 弹性云服务的准入控制
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.63
Kleopatra G. Konstanteli, T. Cucinotta, Konstantinos Psychas, T. Varvarigou
This paper presents an admission control test for deciding whether or not it is worth to admit a set of services into a Cloud, and in case of acceptance, obtain the optimum allocation for each of the components that comprise the services. In the proposed model, the focus is on hosting elastic services the resource requirements of which may dynamically grow and shrink, depending on the dynamically varying number of users and patterns of requests. In finding the optimum allocation, the presented admission control test uses an optimization model, which incorporates business rules in terms of trust, eco-efficiency and cost, and also takes into account affinity rules the components that comprise the service may have. The problem is modeled on the General Algebraic Modeling System (GAMS) and solved under realistic provider's settings that demonstrate the efficiency of the proposed method.
本文提出了一个接纳控制测试,用于决定是否值得将一组服务接纳到云中,并在接受的情况下,为组成服务的每个组件获得最佳分配。在建议的模型中,重点是托管弹性服务,这些服务的资源需求可能会动态地增长或减少,这取决于动态变化的用户数量和请求模式。在寻找最优分配时,所提出的准入控制测试使用了一个优化模型,该模型结合了信任、生态效率和成本方面的业务规则,并考虑了组成服务的组件可能具有的亲和规则。在通用代数建模系统(GAMS)上对该问题进行了建模,并在实际的供应商设置下进行了求解,验证了该方法的有效性。
{"title":"Admission Control for Elastic Cloud Services","authors":"Kleopatra G. Konstanteli, T. Cucinotta, Konstantinos Psychas, T. Varvarigou","doi":"10.1109/CLOUD.2012.63","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.63","url":null,"abstract":"This paper presents an admission control test for deciding whether or not it is worth to admit a set of services into a Cloud, and in case of acceptance, obtain the optimum allocation for each of the components that comprise the services. In the proposed model, the focus is on hosting elastic services the resource requirements of which may dynamically grow and shrink, depending on the dynamically varying number of users and patterns of requests. In finding the optimum allocation, the presented admission control test uses an optimization model, which incorporates business rules in terms of trust, eco-efficiency and cost, and also takes into account affinity rules the components that comprise the service may have. The problem is modeled on the General Algebraic Modeling System (GAMS) and solved under realistic provider's settings that demonstrate the efficiency of the proposed method.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"86 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115661176","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 54
Maitland: Lighter-Weight VM Introspection to Support Cyber-security in the Cloud Maitland:轻量级VM自省以支持云中的网络安全
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.145
Chris Benninger, S. Neville, Y. Yazir, Chris Matthews, Y. Coady
Despite defensive advances, malicious software (malware) remains an ever present cyber-security threat. Cloud environments are far from malware immune, in that: i) they innately support the execution of remotely supplied code, and ii) escaping their virtual machine (VM) confines has proven relatively easy to achieve in practice. The growing interest in clouds by industries and governments is also creating a core need to be able to formally address cloud security and privacy issues. VM introspection provides one of the core cyber-security tools for analyzing the run-time behaviors of code. Traditionally, introspection approaches have required close integration with the underlying hypervisors and substantial re-engineering when OS updates and patches are applied. Such heavy-weight introspection techniques, therefore, are too invasive to fit well within modern commercial clouds. Instead, lighter-weight introspection techniques are required that provide the same levels of within-VM observability but without the tight hypervisor and OS patch-level integration. This work introduces Maitland as a prototype proof-of-concept implementation a lighter-weight introspection tool, which exploits paravirtualization to meet these end-goals. The work assesses Maitland's performance, highlights its use to perform packer-independent malware detection, and assesses whether, with further optimizations, Maitland could provide a viable approach for introspection in commercial clouds.
尽管防御技术有所进步,但恶意软件仍然是一个始终存在的网络安全威胁。云环境远不是不受恶意软件的影响,因为:i)它们天生支持执行远程提供的代码,ii)在实践中,逃离其虚拟机(VM)的限制已被证明相对容易实现。行业和政府对云的兴趣日益浓厚,这也产生了一种能够正式解决云安全和隐私问题的核心需求。VM自省提供了分析代码运行时行为的核心网络安全工具之一。传统上,内省方法需要与底层管理程序紧密集成,并在应用操作系统更新和补丁时进行大量重新设计。因此,这种重量级的自省技术过于侵入性,无法很好地适应现代商业云。相反,需要更轻量级的内省技术,以提供相同级别的vm内可观察性,但不需要严格的管理程序和操作系统补丁级集成。这项工作将Maitland作为概念验证实现的原型引入,这是一种轻量级的自省工具,它利用半虚拟化来满足这些最终目标。这项工作评估了Maitland的性能,强调了它在执行独立于包装程序的恶意软件检测方面的用途,并评估了通过进一步优化,Maitland是否可以为商业云中的自省提供一种可行的方法。
{"title":"Maitland: Lighter-Weight VM Introspection to Support Cyber-security in the Cloud","authors":"Chris Benninger, S. Neville, Y. Yazir, Chris Matthews, Y. Coady","doi":"10.1109/CLOUD.2012.145","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.145","url":null,"abstract":"Despite defensive advances, malicious software (malware) remains an ever present cyber-security threat. Cloud environments are far from malware immune, in that: i) they innately support the execution of remotely supplied code, and ii) escaping their virtual machine (VM) confines has proven relatively easy to achieve in practice. The growing interest in clouds by industries and governments is also creating a core need to be able to formally address cloud security and privacy issues. VM introspection provides one of the core cyber-security tools for analyzing the run-time behaviors of code. Traditionally, introspection approaches have required close integration with the underlying hypervisors and substantial re-engineering when OS updates and patches are applied. Such heavy-weight introspection techniques, therefore, are too invasive to fit well within modern commercial clouds. Instead, lighter-weight introspection techniques are required that provide the same levels of within-VM observability but without the tight hypervisor and OS patch-level integration. This work introduces Maitland as a prototype proof-of-concept implementation a lighter-weight introspection tool, which exploits paravirtualization to meet these end-goals. The work assesses Maitland's performance, highlights its use to perform packer-independent malware detection, and assesses whether, with further optimizations, Maitland could provide a viable approach for introspection in commercial clouds.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114338961","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 41
A Framework for Classification of Resource Consolidation Management Problems 资源整合管理问题分类框架
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.114
S. Lonergan, Y. Yazir, U. Stege
Much effort in the current literature has been put towards methods and implementations to solve Resource Consolidation Management (RCM) problems in the cloud setting. A vast number of proposed solutions appears to be designed for different variants of the RCM problem. This makes the comparison of approaches challenging. We propose a new framework that facilitates mapping RCM solutions to their RCM problem definitions. Our framework allows a solution to be assigned to its RCM problem definition by means of answering a set of questions specific to RCM problems. Our framework can be used to (1) specify problem descriptions, (2) establish optimal solutions and providing theoretical benchmarks, (3) provide a platform allowing formal complexity analysis of RCM problems and (4) facilitate a healthy discussion about the essence of RCM and evaluations of different solutions. We show how our proposed framework can be applied in form of case studies depicting four approaches from the literature.
在当前的文献中,很多工作都放在了解决云环境中的资源整合管理(RCM)问题的方法和实现上。大量提出的解决方案似乎是针对RCM问题的不同变体而设计的。这使得方法的比较具有挑战性。我们提出了一个新的框架,便于将RCM解决方案映射到它们的RCM问题定义。我们的框架允许通过回答一组特定于RCM问题的问题来将解决方案分配给它的RCM问题定义。我们的框架可用于(1)指定问题描述;(2)建立最优解决方案并提供理论基准;(3)提供一个平台,允许对RCM问题进行正式的复杂性分析;(4)促进关于RCM本质和不同解决方案评估的健康讨论。我们展示了我们提出的框架如何以案例研究的形式应用,描述了文献中的四种方法。
{"title":"A Framework for Classification of Resource Consolidation Management Problems","authors":"S. Lonergan, Y. Yazir, U. Stege","doi":"10.1109/CLOUD.2012.114","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.114","url":null,"abstract":"Much effort in the current literature has been put towards methods and implementations to solve Resource Consolidation Management (RCM) problems in the cloud setting. A vast number of proposed solutions appears to be designed for different variants of the RCM problem. This makes the comparison of approaches challenging. We propose a new framework that facilitates mapping RCM solutions to their RCM problem definitions. Our framework allows a solution to be assigned to its RCM problem definition by means of answering a set of questions specific to RCM problems. Our framework can be used to (1) specify problem descriptions, (2) establish optimal solutions and providing theoretical benchmarks, (3) provide a platform allowing formal complexity analysis of RCM problems and (4) facilitate a healthy discussion about the essence of RCM and evaluations of different solutions. We show how our proposed framework can be applied in form of case studies depicting four approaches from the literature.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"58 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115711415","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
ReLoC: A Resilient Loosely Coupled Application Architecture for State Management in the Cloud ReLoC:用于云中状态管理的弹性松散耦合应用程序架构
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.130
V. Sharma, Shubhashis Sengupta, K. Annervaz
Maintaining the state of applications and user sessions is difficult in large scale web-based software systems. This problem is particularly accentuated in the context of Cloud computing as Cloud providers, especially Platform as a Service (PaaS) vendors, do not explicitly support state management infrastructure - such as clustering. In a PaaS environment, a user has little or no access and control over the server platform and session management layer. Additionally, the platform tiers are generally loosely coupled and service-oriented. These make traditional session-state management techniques non-usable. In this work, we present ReLoC - a session-state management architecture for Cloud that uses loosely-coupled services and platform agnostic scalable messaging technology to propagate and save session states. Preliminary experiments show a very high level of tolerance to failures of the platform tiers without corresponding disruptions in user sessions. We argue that, in the context of PaaS Clouds, ReLoC architecture will be more scalable compared to traditional clustering environments.
在大规模的基于web的软件系统中,维护应用程序和用户会话的状态是很困难的。这个问题在云计算环境中尤为突出,因为云提供商,特别是平台即服务(PaaS)供应商,并没有明确地支持状态管理基础设施——比如集群。在PaaS环境中,用户很少或根本没有对服务器平台和会话管理层的访问和控制。此外,平台层通常是松散耦合和面向服务的。这使得传统的会话状态管理技术无法使用。在这项工作中,我们提出了ReLoC——一种用于云的会话状态管理架构,它使用松耦合服务和平台无关的可扩展消息传递技术来传播和保存会话状态。初步实验表明,对平台层的故障具有非常高的容忍度,而不会对用户会话造成相应的中断。我们认为,在PaaS云环境下,与传统集群环境相比,ReLoC架构将更具可扩展性。
{"title":"ReLoC: A Resilient Loosely Coupled Application Architecture for State Management in the Cloud","authors":"V. Sharma, Shubhashis Sengupta, K. Annervaz","doi":"10.1109/CLOUD.2012.130","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.130","url":null,"abstract":"Maintaining the state of applications and user sessions is difficult in large scale web-based software systems. This problem is particularly accentuated in the context of Cloud computing as Cloud providers, especially Platform as a Service (PaaS) vendors, do not explicitly support state management infrastructure - such as clustering. In a PaaS environment, a user has little or no access and control over the server platform and session management layer. Additionally, the platform tiers are generally loosely coupled and service-oriented. These make traditional session-state management techniques non-usable. In this work, we present ReLoC - a session-state management architecture for Cloud that uses loosely-coupled services and platform agnostic scalable messaging technology to propagate and save session states. Preliminary experiments show a very high level of tolerance to failures of the platform tiers without corresponding disruptions in user sessions. We argue that, in the context of PaaS Clouds, ReLoC architecture will be more scalable compared to traditional clustering environments.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"82 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123258606","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Challenges and Opportunities in Consolidation at High Resource Utilization: Non-monotonic Response Time Variations in n-Tier Applications 高资源利用率下整合的挑战与机遇:n层应用的非单调响应时间变化
Pub Date : 2012-06-24 DOI: 10.1109/CLOUD.2012.99
Simon Malkowski, Yasuhiko Kanemasa, Hanwei Chen, Masao Yamamoto, Qingyang Wang, D. Jayasinghe, C. Pu, Motoyuki Kawaba
A central goal of cloud computing is high resource utilization through hardware sharing; however, utilization often remains modest in practice due to the challenges in predicting consolidated application performance accurately. We present a thorough experimental study of consolidated n-tier application performance at high utilization to address this issue through reproducible measurements. Our experimental method illustrates opportunities for increasing operational efficiency by making consolidated application performance more predictable in high utilization scenarios. The main focus of this paper are non-trivial dependencies between SLA-critical response time degradation effects and software configurations (i.e., readily available tuning knobs). Methodologically, we directly measure and analyze the resource utilizations, request rates, and performance of two consolidated n-tier application benchmark systems (RUBBoS) in an enterprise-level computer virtualization environment. We find that monotonically increasing the workload of an n-tier application system may unexpectedly spike the overall response time of another co-located system by 300 percent despite stable throughput. Based on these findings, we derive a software configuration best-practice to mitigate such non-monotonic response time variations by enabling higher request-processing concurrency (e.g., more threads) in all tiers. More generally, this experimental study increases our quantitative understanding of the challenges and opportunities in the widely used (but seldom supported, quantified, or even mentioned) hypothesis that applications consolidate with linear performance in cloud environments.
云计算的中心目标是通过硬件共享实现高资源利用率;然而,由于在准确预测整合的应用程序性能方面存在挑战,因此在实践中利用率通常保持适度。为了通过可重复的测量来解决这个问题,我们对高利用率下的统一n层应用程序性能进行了全面的实验研究。我们的实验方法说明了通过在高利用率场景中使整合的应用程序性能更可预测来提高操作效率的机会。本文的主要焦点是sla关键响应时间退化效应与软件配置(即,随时可用的调优旋钮)之间的重要依赖关系。在方法上,我们在企业级计算机虚拟化环境中直接度量和分析两个合并的n层应用程序基准系统(RUBBoS)的资源利用率、请求率和性能。我们发现,单调地增加n层应用程序系统的工作负载可能会意外地使另一个共置系统的总体响应时间增加300%,尽管吞吐量稳定。基于这些发现,我们导出了一个软件配置最佳实践,通过在所有层中启用更高的请求处理并发性(例如,更多线程)来减轻这种非单调响应时间变化。更一般地说,这项实验研究增加了我们对广泛使用(但很少得到支持、量化或甚至提到)的假设中的挑战和机遇的定量理解,该假设认为应用程序在云环境中具有线性性能。
{"title":"Challenges and Opportunities in Consolidation at High Resource Utilization: Non-monotonic Response Time Variations in n-Tier Applications","authors":"Simon Malkowski, Yasuhiko Kanemasa, Hanwei Chen, Masao Yamamoto, Qingyang Wang, D. Jayasinghe, C. Pu, Motoyuki Kawaba","doi":"10.1109/CLOUD.2012.99","DOIUrl":"https://doi.org/10.1109/CLOUD.2012.99","url":null,"abstract":"A central goal of cloud computing is high resource utilization through hardware sharing; however, utilization often remains modest in practice due to the challenges in predicting consolidated application performance accurately. We present a thorough experimental study of consolidated n-tier application performance at high utilization to address this issue through reproducible measurements. Our experimental method illustrates opportunities for increasing operational efficiency by making consolidated application performance more predictable in high utilization scenarios. The main focus of this paper are non-trivial dependencies between SLA-critical response time degradation effects and software configurations (i.e., readily available tuning knobs). Methodologically, we directly measure and analyze the resource utilizations, request rates, and performance of two consolidated n-tier application benchmark systems (RUBBoS) in an enterprise-level computer virtualization environment. We find that monotonically increasing the workload of an n-tier application system may unexpectedly spike the overall response time of another co-located system by 300 percent despite stable throughput. Based on these findings, we derive a software configuration best-practice to mitigate such non-monotonic response time variations by enabling higher request-processing concurrency (e.g., more threads) in all tiers. More generally, this experimental study increases our quantitative understanding of the challenges and opportunities in the widely used (but seldom supported, quantified, or even mentioned) hypothesis that applications consolidate with linear performance in cloud environments.","PeriodicalId":214084,"journal":{"name":"2012 IEEE Fifth International Conference on Cloud Computing","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-06-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123645116","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 32
期刊
2012 IEEE Fifth International Conference on Cloud Computing
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1