Fast Boot Research Articles

EICIDS-Elastic and Internal Cloud-based Intrusion Detection System

The elasticity and abundant availability of computational resources are attractive to intruders exploit vulnerabilities of the cloud, thus being able to launch attacks against legitimate users to gain access to private and privileged information. The Intrusion Detection Systems are presented as a possible solution for protection; however, to effectively protect cloud users, it must have the ability to expand, rapidly increased or decreased the amount of sensors, according to the provisioning resources, and isolate the access to infrastructure and system levels. Protection against internal threats should also be planned, as most of the protection systems do not identify them properly. In order to solve these problems, we present the EICIDS - Elastic and Internal Cloud-based Intrusion Detection System, which monitors the internal environment of the cloud, entering sensor data capture in the local network of user´s VMs, thus being able to detect suspicious behavior of users. For this, the EICIDS uses the characteristics of virtual machines (such as fast boot, quick recovery, stop, migrate between different hosts and execution across multiple platforms) in order to monitor and protect the environment of cloud computing, with the growth or reduction of the cloud in order to save resources.

Set the configuration for the heart of the OS

This paper presents a study on the practicality of operating system (OS) kernel debloating, that is, reducing kernel code that is not needed by the target applications. Despite their significant benefits regarding security (attack surface reduction) and performance (fast boot time and reduced memory footprints), the state-of-the-art OS kernel debloating techniques are not widely adopted in practice, especially in production environments. We identify the limitations of existing kernel debloating techniques that hinder their practical adoption, such as both accidental and essential ones. To understand these limitations, we build an advanced debloating framework named Cozart that enables us to conduct a number of experiments on different types of OS kernels (such as Linux and the L4 microkernel) with a wide variety of applications (such as HTTPD, Memcached, MySQL, NGINX, PHP, and Redis). Our experimental results reveal the challenges and opportunities in making OS kernel debloating practical. We share these insights and our experience to shed light on addressing the limitations of kernel debloating techniques in future research and development efforts.

Hybrid Autoscaling Strategy on Container-Based Cloud Platform

The container has several advantages over the traditional virtual machine technology such as light-weight, fast booting time, and fast recovery. Kubernetes is one the most outstanding container management and deployment platforms. The Kubernetes provides autoscaling function, which will increase and decrease the hardware resources to adapt with the current traffic load situation to keep the user experience. Two popular autoscaling methods are horizontal autoscaling and vertical autoscaling. Based on the monitoring resource utilization, horizontal autoscaling will increase the number of PoDs (point of deployment) or vertical autoscaling will increase the hardware resources of each PoD to achieve the target utilization. In this paper, we present a hybrid solution that combines the advantages of both autoscaling solutions and proposes a bandwidth-efficient scheduler strategy. By numerical analysis, our hybrid approach is better than the normal HPA approach in terms of bandwidth cost and has lower autoscaling latency than the VPA approach

Set the Configuration for the Heart of the OS

This paper presents a study on the practicality of operating system (OS) kernel debloating-reducing kernel code that is not needed by the target applications-in real-world systems. Despite their significant benefits regarding security (attack surface reduction) and performance (fast boot times and reduced memory footprints), the state-of-the-art OS kernel debloating techniques are seldom adopted in practice, especially in production systems. We identify the limitations of existing kernel debloating techniques that hinder their practical adoption, including both accidental and essential limitations. To understand these limitations, we build an advanced debloating framework named Cozart which enables us to conduct a number of experiments on different types of OS kernels (including Linux and the L4 microkernel) with a wide variety of applications (including HTTPD, Memcached, MySQL, NGINX, PHP and Redis). Our experimental results reveal the challenges and opportunities towards making kernel debloating techniques practical for realworld systems. The main goal of this paper is to share these insights and our experiences to shed light on addressing the limitations of kernel debloating in future research and development efforts.

Set the Configuration for the Heart of the OS

This paper presents a study on the practicality of operating system (OS) kernel debloating---reducing kernel code that is not needed by the target applications---in real-world systems. Despite their significant benefits regarding security (attack surface reduction) and performance (fast boot times and reduced memory footprints), the state-of-the-art OS kernel debloating techniques are seldom adopted in practice, especially in production systems. We identify the limitations of existing kernel debloating techniques that hinder their practical adoption, including both accidental and essential limitations. To understand these limitations, we build an advanced debloating framework named \tool which enables us to conduct a number of experiments on different types of OS kernels (including Linux and the L4 microkernel) with a wide variety of applications (including HTTPD, Memcached, MySQL, NGINX, PHP and Redis). Our experimental results reveal the challenges and opportunities towards making kernel debloating techniques practical for real-world systems. The main goal of this paper is to share these insights and our experiences to shed light on addressing the limitations of kernel debloating in future research and development efforts.

Implementation of Linux Optimization Technique for ARM Based System on Chip

Abstract Applications of an embedded system have been expanded throughout the years. It is usually observed in the digital consumer market where cell phones are replaced by smart phones and internet tablets. More functionality is brought into one single purpose system for giving the enhanced services to the users. The Linux Kernel based operating system is used in most of these electronic devices. The biggest protests about Linux are the size and speed at which it boots. The users expect these devices to have fast boot up time and a small amount of memory. In multiple real-time systems, many Linux versions are used that need a large level of accessibility and negligible downtime when updating systems. This results in advancing Linux boot time and size optimization. The objective of this paper is to keep the researchers up to date about Linux Optimization techniques. First of all, this paper survey the various boot time optimization techniques and size reduction techniques with respect to conventional Linux system. It then implements the efficient size optimization technique for ARM based Raspberry Pi board. The findings reveal that the operating system image builds after size optimization technique is 25% lighter in size than original image and boot-up time diminishes by half.

VirtMan: design and implementation of a fast booting system for homogeneous virtual machines in iVCE

Internet-based virtual computing environment (iVCE) has been proposed to combine data centers and other kinds of computing resources on the Internet to provide efficient and economical services. Virtual machines (VMs) have been widely used in iVCE to isolate different users/jobs and ensure trustworthiness, but traditionally VMs require a long period of time for booting, which cannot meet the requirement of iVCE’s large-scale and highly dynamic applications. To address this problem, in this paper we design and implement VirtMan, a fast booting system for a large number of virtual machines in iVCE. VirtMan uses the Linux Small Computer System Interface (SCSI) target to remotely mount to the source image in a scalable hierarchy, and leverages the homogeneity of a set of VMs to transfer only necessary image data at runtime. We have implemented VirtMan both as a standalone system and for OpenStack. In our 100-server testbed, VirtMan boots up 1000 VMs (with a 15 GB image of Windows Server 2008) on 100 physical servers in less than 120 s, which is three orders of magnitude lower than current public clouds.

뉴메모리+DRAM 하이브리드 메모리 시스템에서의 고속부팅 기법 연구

Next generation memory technologies, which we denote as 'new memory', have both non-volatile and byte addressable properties. These characteristics are expected to bring changes to the conventional computer system structure. In this paper, we propose a fast boot technique for hybrid main memory architectures that have both new memory and DRAM. The key technique used for fast booting is write-tracking. Write-tracking is used to detect and manage modified data detection and involves setting the kernel region to read-only. This setting is used to trigger intentional faults upon modification requests. As the fault handler can detect the faulting address, write-tracking makes use of the address to manage the modified data. In particular, in our case, we make use of the MMU (Memory Management Unit) translation table. When a write occurs to the boot completed state, write-tracking preserves the original state of the modified address of the kernel region to a particular location, and execution continues. Upon booting, the fast booting process restores the preserved data to the original kernel region allowing rapid system boot-up. We develop the fast booting technique in an actual embedded board equipped with new memory. The boot time is reduced to less than half a second compared to around 15 seconds that is required for the original system.

멀티코어 기반의 임베디드 시스템에서 안드로이드 부팅 속도 향상 방법

현재 임베디드 기기는 멀티코어로 급성장하고 있으며 빠른 부팅 속도를 요구하고 있다. 하지만 기존의 부팅 기술은 하나의 코어만을 사용하고 있다. 따라서 본 논문에서는 분석 도구를 통해 안드로이드 부트 프로세스를 분석후, CPU연산이 많은 곳에 병렬 기법을 적용하는 방법과 멀티 코어의 성능을 최대로 끌어내기 위해 CPU주파수 정책을 변경함으로써 멀티코어 기반에서 안드로이드 부팅 속도 향상 방법에 대해 제안한다. 본 논문의 제안 방법을 듀얼 코어 S5PV310과 쿼드 코어 Exynos4412에 각각 적용시킨 뒤 부팅 완료 시간을 측정하였으며 기존의 방법과 제안 방법의 시간을 비교한 결과 듀얼코어와 쿼드코어에서 각각 약 20.71%, 약 31.34%의 속도 성능향상을 가져왔다. The current embedded devices are growing rapidly in the multi-core, and these demand fast boot time. But method of previous boot uses core only one. The method includes parallel techniques and modification of CPU Frequency policy. Parallel methods, after analyzing the Android boot process with analysis tool, applied to location where a lot of CPU operation. CPU Frequency policy is modified for high performance of core. The proposed method was applied to S5PV310 dual core and Exynos4412 quad core embedded system. As a result of the experiment, we found that the proposed method makes boot time fast about 20.71% and 31.34% in dual core and quad core environment as compared with the previous method.

어플리케이션 처리속도 개선을 위한 임베디드 리눅스 경량화 기법

In this paper, we propose a method of embedded linux light-weight to improve efficiency of application running on embedded systems. Three methods including fast booting scheme applying the Hibernation technique, JFFS2 file system optimization applying the Symbolic Link and virtual address mapping, kernel light-weight that guarantees the general purpose was applied. Since then check the system dependency and generate kernel image according to the target embedded kit. And embedded system performance of existing linux and linux which the method proposed in this paper was compared. In experimental result, the kernel size was 9.6% improved and the system booting time was 18% improved. And application processing speed on target embedded kit was improved 11% in the best case, 66% in the worst case. This result show that the light-weight method proposed in this paper is guarantee fast booting time and securing resources and it is good for the application processing speed improvement.

An Efficient Trustworthy Protected-Ring Model for UEFI Firmware

A trustworthy protected-ring model for UEFI firmware is proposed and a prototype based on Intel Platform Innovation Framework is implemented in this paper. In addition to meet static security attributes such as integrity and authenticity proposed in trusted firmware, this model can also satisfy some dynamic security attributes such as control object’s operations on device or modifications on key data. Furthermore, this model is simple and efficient enough to meet firmware’s need for small size and fast boot.

동적 IDE 장치 검사 기법을 이용한 리눅스 커널의 빠른 부팅

기존의 임베디드 시스템은 Intel x86 계열의 CPU를 장착한 PC(Personal Computer) 플랫폼에 기반하여 구현되었는데, 이는 PC 환경에서 개발된 많은 솔루션들을 이용할 경우 전체적 인 제품 개발 기간을 단축할 수 있을 뿐만 아니라 제품의 신뢰성을 높일 수 있기 때문이다. 또한 PC 플랫폼 기반의 임베디드 시스템은 데이터 저장을 목적으로 하는 경우가 많아 주로 대용량 하드디스크를 데이터 저장장치로 사용한다. 최근 하드디스크의 용량은 빠른 속도로 증가하고 있는 반면에 하드디스크의 구동 준비 시간이 30초 이상으로 길어지는 문제점이 발생하고 있다. 길어진 하드디스크의 구동 준비 시간은 시스템의 부팅 시간에 영향을 미쳐 전체 시스템의 부팅 시간이 길어지고 사용자의 불편함을 가중시키게 된다. 본 논문에서는 대용량 저장장치를 지원하는 PC 플랫폼 기반의 임베디드 시스템에서 리눅스 커널이 빠른 부팅을 수행할 수 있도록 개선된 시스템 구조와 동적 디스크 장치 검사 기법을 제안하고, 성능을 평가하여 제시한다. Most of embedded systems have been developed practically based on the PC platform equipped with Intel x86 CPU since it is able to reduce the total time for product development and improve the reliability of product by making use of a variety of solutions developed for a long time in the PC environment. Also, embedded systems based on PC-platform mainly use a high-capacity hard disk as data storage device for applications intending to store multimedia data. Recently, while the capacity of hard disk is increasing rapidly, the start-up ready time of hard disk is growing longer more than 30 seconds. The lengthened start-up ready time may delay the booting time of embedded system seriously, weighting users down with inconvenience. This paper proposes the refined system architecture and the dynamic IDE device probing method for fast booting of linux kernel in the embedded system based on PC platform with high-capacity hard disks, and the performance of proposed methods is evaluated and presented.

Design of a NAND Flash Memory File System to Improve System Boot Time

NAND flash memory-based embedded systems are becoming increasingly common. These embedded systems have to provide a fast boot time. In this paper, we have designed and proposed a flash file system for embedded systems that require fast booting. By using a Flash Image Area, which keeps the latest flash memory information such as types and status of all blocks, the file system mounting time can be reduced significantly. We have shown by experiments that our file system outperforms YAFFS and RFFS.

A Linux-based tool for hardware bring up, Linux development, and manufacturing

In this paper we describe Bare Metal Linux (BML), a cut-down version of Linux® 2.6 that requires no firmware, has an in-memory root file system, and runs without a virtualization layer. We designed and implemented BML in order to accelerate the bring up of POWER5TM-based systems. The use of BML allows testing and validation of the POWERS-based system to be conducted in parallel with the standard path, which involves the bring up of a hypervisor, the partition firmware, and the operating system. BML, which has fast boot times and can be modified quickly, is used in fault detection during chip manufacturing, POWER5 chip verification, system-board verification, and benchmarking for performance. BML is also used to reproduce and resolve problems in Linux.