SG11201510735RA - Page fault injection in virtual machines to cause mapping of swapped-out memory pages into vm] virtu alized memory - Google Patents

Page fault injection in virtual machines to cause mapping of swapped-out memory pages into vm] virtu alized memory

Info

Publication number
SG11201510735RA
SG11201510735RA SG11201510735RA SG11201510735RA SG11201510735RA SG 11201510735R A SG11201510735R A SG 11201510735RA SG 11201510735R A SG11201510735R A SG 11201510735RA SG 11201510735R A SG11201510735R A SG 11201510735RA SG 11201510735R A SG11201510735R A SG 11201510735RA
Authority
SG
Singapore
Prior art keywords
memory
swapped
virtual machines
page fault
fault injection
Prior art date
Application number
SG11201510735RA
Other languages
English (en)
Inventor
Andrei-Vlad Luţas
Original Assignee
Bitdefender Ipr Man Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bitdefender Ipr Man Ltd filed Critical Bitdefender Ipr Man Ltd
Publication of SG11201510735RA publication Critical patent/SG11201510735RA/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02Addressing or allocation; Relocation
    • G06F12/08Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/10Address translation
    • G06F12/1009Address translation using page tables, e.g. page table structures
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02Addressing or allocation; Relocation
    • G06F12/08Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/10Address translation
    • G06F12/1027Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB]
    • G06F12/1045Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB] associated with a data cache
    • G06F12/1063Address translation using associative or pseudo-associative address translation means, e.g. translation look-aside buffer [TLB] associated with a data cache the data cache being concurrently virtually addressed
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02Addressing or allocation; Relocation
    • G06F12/08Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • G06F12/0802Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches
    • G06F12/0866Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches for peripheral storage systems, e.g. disk cache
    • G06F12/0873Mapping of cache memory to specific storage devices or parts thereof
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • G06F21/79Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data in semiconductor storage media, e.g. directly-addressable memories
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02Addressing or allocation; Relocation
    • G06F12/08Addressing or allocation; Relocation in hierarchically structured memory systems, e.g. virtual memory systems
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45583Memory management, e.g. access or allocation
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45587Isolation or security of virtual machine instances
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/45591Monitoring or debugging support

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Memory System Of A Hierarchy Structure (AREA)
  • Storage Device Security (AREA)
  • Debugging And Monitoring (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
SG11201510735RA 2013-07-17 2014-07-02 Page fault injection in virtual machines to cause mapping of swapped-out memory pages into vm] virtu alized memory SG11201510735RA (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US201361847538P 2013-07-17 2013-07-17
US14/289,163 US9507727B2 (en) 2013-07-17 2014-05-28 Page fault injection in virtual machines
PCT/RO2014/000018 WO2015152747A2 (en) 2013-07-17 2014-07-02 Page fault injection in virtual machines

Publications (1)

Publication Number Publication Date
SG11201510735RA true SG11201510735RA (en) 2016-02-26

Family

ID=52344738

Family Applications (1)

Application Number Title Priority Date Filing Date
SG11201510735RA SG11201510735RA (en) 2013-07-17 2014-07-02 Page fault injection in virtual machines to cause mapping of swapped-out memory pages into vm] virtu alized memory

Country Status (12)

Country Link
US (1) US9507727B2 (enrdf_load_stackoverflow)
EP (1) EP3022648B8 (enrdf_load_stackoverflow)
JP (1) JP6411494B2 (enrdf_load_stackoverflow)
KR (1) KR101955189B1 (enrdf_load_stackoverflow)
CN (1) CN105393229B (enrdf_load_stackoverflow)
AU (1) AU2014389571B2 (enrdf_load_stackoverflow)
CA (1) CA2915646C (enrdf_load_stackoverflow)
ES (1) ES2639500T3 (enrdf_load_stackoverflow)
IL (1) IL243122B (enrdf_load_stackoverflow)
RU (1) RU2659472C2 (enrdf_load_stackoverflow)
SG (1) SG11201510735RA (enrdf_load_stackoverflow)
WO (1) WO2015152747A2 (enrdf_load_stackoverflow)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9612865B2 (en) 2015-06-15 2017-04-04 International Business Machines Corporation Managed services coordinator
US9898322B2 (en) * 2015-10-29 2018-02-20 International Business Machines Corporation Steganographic message passing between a virtual machine and a hypervisor
WO2017131780A1 (en) * 2016-01-29 2017-08-03 Hewlett Packard Enterprise Development Lp Identifying object modifications
US12339979B2 (en) * 2016-03-07 2025-06-24 Crowdstrike, Inc. Hypervisor-based interception of memory and register accesses
US12248560B2 (en) * 2016-03-07 2025-03-11 Crowdstrike, Inc. Hypervisor-based redirection of system calls and interrupt-based task offloading
US10116630B2 (en) * 2016-04-04 2018-10-30 Bitdefender IPR Management Ltd. Systems and methods for decrypting network traffic in a virtualized environment
US10528476B2 (en) * 2016-05-24 2020-01-07 International Business Machines Corporation Embedded page size hint for page fault resolution
US10264002B2 (en) * 2016-07-14 2019-04-16 Mitsui Bussan Secure Directions, Inc. Program, information processing device, and information processing method
US10346050B2 (en) 2016-10-26 2019-07-09 International Business Machines Corporation Virtualization of memory compute functionality
US10635479B2 (en) * 2016-12-19 2020-04-28 Bitdefender IPR Management Ltd. Event filtering for virtual machine security applications
US10489185B2 (en) * 2017-03-17 2019-11-26 Nicira, Inc. Hypervisor-assisted approach for locating operating system data structures based on attribute matching
US20180267818A1 (en) * 2017-03-17 2018-09-20 Nicira, Inc. Hypervisor-assisted approach for locating operating system data structures based on notification data
US11150929B2 (en) 2018-05-29 2021-10-19 Red Hat, Inc. Enhanced memory management for virtual machines
CN110209354B (zh) * 2019-05-24 2022-04-19 北京百度网讯科技有限公司 用于处理数据的方法、装置、设备和介质
WO2022087481A1 (en) * 2020-10-22 2022-04-28 Vangaveti Kiran In memory decoy
US11550673B2 (en) * 2020-11-17 2023-01-10 Google Llc Virtual machines recoverable from uncorrectable memory errors
CN112256404B (zh) * 2020-11-17 2024-04-05 杭州安恒信息技术股份有限公司 一种虚拟机自省方法、装置、设备及介质
US11586513B2 (en) 2020-11-17 2023-02-21 Google Llc Live migrating virtual machines to a target host upon fatal memory errors
US11816498B2 (en) * 2021-01-21 2023-11-14 Nutanix, Inc. Early event-based notification for VM swapping
US11977431B2 (en) 2022-03-15 2024-05-07 Google Llc Memory error prevention by proactive memory poison recovery

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH10240702A (ja) * 1997-02-26 1998-09-11 Sony Corp 並列処理プロセッサおよびその処理方法
US7305592B2 (en) * 2004-06-30 2007-12-04 Intel Corporation Support for nested fault in a virtual machine environment
US8291409B2 (en) * 2006-05-22 2012-10-16 Microsoft Corporation Updating virtual machine with patch on host that does not have network access
US7757034B1 (en) 2006-06-29 2010-07-13 Parallels Software International, Inc. Expansion of virtualized physical memory of virtual machine
US7757035B2 (en) * 2007-06-26 2010-07-13 Intel Corporation Method for optimizing virtualization technology and memory protections using processor-extensions for page table and page directory striping
US8607013B2 (en) 2007-10-30 2013-12-10 Vmware, Inc. Providing VMM access to guest virtual memory
US8244954B2 (en) 2008-10-10 2012-08-14 International Business Machines Corporation On-demand paging-in of pages with read-only file system
US8117373B2 (en) 2009-04-30 2012-02-14 Kimon Berlin VM host responding to initiation of a page swap by transferring pages from host-but-non-guest-addressable RAM to host-and-guest-addressable RAM
US8788739B2 (en) 2009-06-29 2014-07-22 Hewlett-Packard Development Company, L.P. Hypervisor-based management of local and remote virtual memory pages
US8271450B2 (en) 2009-10-01 2012-09-18 Vmware, Inc. Monitoring a data structure in a virtual machine and determining if memory pages containing the data structure are swapped into or out of guest physical memory
CN102129531B (zh) * 2011-03-22 2013-07-24 北京工业大学 一种基于Xen的主动防御方法
US8694738B2 (en) 2011-10-11 2014-04-08 Mcafee, Inc. System and method for critical address space protection in a hypervisor environment
CN102736969B (zh) * 2012-05-22 2014-12-17 中国科学院计算技术研究所 一种针对硬件虚拟化的内存监控方法和系统
US8914458B2 (en) 2012-09-27 2014-12-16 Mellanox Technologies Ltd. Look-ahead handling of page faults in I/O operations

Also Published As

Publication number Publication date
CA2915646C (en) 2020-08-25
ES2639500T3 (es) 2017-10-26
EP3022648B1 (en) 2017-06-14
US20150026807A1 (en) 2015-01-22
HK1216679A1 (zh) 2016-11-25
RU2016104469A (ru) 2017-08-22
WO2015152747A2 (en) 2015-10-08
JP6411494B2 (ja) 2018-10-24
KR101955189B1 (ko) 2019-03-08
AU2014389571A1 (en) 2016-01-21
CN105393229B (zh) 2019-01-18
KR20160033689A (ko) 2016-03-28
IL243122B (en) 2019-11-28
CA2915646A1 (en) 2015-10-08
AU2014389571B2 (en) 2019-05-09
RU2659472C2 (ru) 2018-07-02
EP3022648A2 (en) 2016-05-25
US9507727B2 (en) 2016-11-29
WO2015152747A3 (en) 2015-12-03
EP3022648B8 (en) 2017-08-02
CN105393229A (zh) 2016-03-09
JP2016525255A (ja) 2016-08-22

Similar Documents

Publication Publication Date Title
SG11201510735RA (en) Page fault injection in virtual machines to cause mapping of swapped-out memory pages into vm] virtu alized memory
IL239855B (en) A memory introspection engine to protect the integrity of virtual machines
GB2523280B (en) Controlling access to groups of memory pages in a virtualized environment
GB2508716B (en) Caching of virtual to physical address translations
EP2948864A4 (en) SECURE VIRTUAL MACHINE MIGRATION
BR302013006857S1 (pt) Configuração aplicada em máquina dispensadora
BR302013004023S1 (pt) Configuração aplicada em máquina dispensadora
HRP20181117T1 (hr) Upute o punjenju podataka do specificirane granice memorije naznačene u uputama
GB2502751B (en) Dynamic memory management in a virtualized computing environment
EP3005128A4 (en) Separate memory controllers to access data in memory
BR302013006855S1 (pt) Configuração aplicada em máquina dispensadora
EP2802998A4 (en) ASSIGNMENT OF RESOURCES TO TOOLS VIRTUAL COMPUTER
BR302013006856S1 (pt) Configuração aplicada em máquina dispensadora
EP2842049A4 (en) SECURE ADMINISTRATION OF VIRTUAL COMPUTERS
GB2508751B (en) Interleaving data accesses issued in response to vector access instructions
EP2987282A4 (en) MIGRATION OF VIRTUAL MACHINE
BR302013006858S1 (pt) Configuração aplicada em máquina dispensadora
DK2778972T3 (da) Fælles cache brugt til at tilvejebringe database registreret i zero-copy-hukommelse
IL245426A0 (en) Improvements in or relating to packaging
GB201300820D0 (en) Improvements in or relating to packaging
EP2936318A4 (en) MEMORY ASSIGNMENT FOR VIRTUAL MACHINES USING MEMORY CONFIGURATION
GB201512922D0 (en) Encapsulating virtual server in hypervisor subpartition
EP3069238A4 (en) Determining trustworthiness of a virtual machine operating system prior to boot up
GB2512489B (en) Virtual storage gate system
GB201409388D0 (en) Improvements in and relating to boxes