Research on Semantic Gap Problem of Virtual Machine

Abstract

Semantic gap is a major challenge for virtualization security applications. Many researches have been carried out represented by virtual machine introspection around bridging the semantic gap. This paper analyzes the causes of semantic gap problem, discusses the differences of current semantic gap bridging method in the aspects of extracting and view generation in Guest status based on three typical model of virtual machine introspection, including Out-of band, In-band and Derivative, and evaluates these three models.It also counts on 34 kinds of mainstream methods features of virtual machine introspection on the basis of factors of data source, threat model and VMM security assumption. According to the analysis of defects in data reliability and status recognition of the current methods, this paper also put forward a view generation model which can be used to transfer secret information between Guest and VMM.