Virtual Hardware Research Articles

Virtual management of transport processes in road transport

In connection with the expediency of transferring virtual vehicle management to a cloud environment, hardware virtualization, Web solutions and the Neuronet user interface of auto transfer are considered in the paper. This material will be useful when deploying the customer service technology of rolling stock of car transfer.

MODELO SEMÂNTICO DE OPERAÇÕES ARITMÉTICAS E LÓGICAS PARA HARDWARE VIRTUAL

The objective of this project was to develop a semantic model of arithmetic and logical operations for virtual hardware; this goal was achieved through three main steps: Implement logic gates and arithmetic and logic units in Nand2tetris virtual hardware simulator software; Implement recursive and iterative functions to check the correct functioning of logical and arithmetic operations in the p-code machine virtual machine. In the first stage, implementations of the elementary logic gates were developed in the hardware simulator software Nand2tetris. From these logic gates, combinational circuits and sequential circuits were built as logical and arithmetic unit, Half Adder, Full Adder, 16-bit Addition, 16-bit logical negation, 16-bit logical AND, 16-bit logical OR, among others. The second stage involved experimenting at a high level with arithmetic and logical operations, provided by the virtual machine p-code machine, which was implemented in the C programming language, as addition, subtraction, greater than, less than. In the third stage, having already implemented logical and arithmetic operations, iterative and recursive programs were developed to calculate the nth value of the Fibonacci Sequence and the factorial of any number n.

A review of virtual reality technology

Virtual reality technology (VR) is a computer simulation system that can create and experience virtual worlds. It utilizes computers to generate a simulated environment, allowing users to immerse themselves in the environment. Virtual reality technology has been one of the fastest-developing information technologies in recent years. It, along with multimedia technology and network technology, is known as the three most promising computer technologies. As an emerging science and technology, it has been less than 100 years since its emergence, and there is still great room for development in its theory and practical application. This article focuses on virtual reality technology and its applications, based on existing literature and statistical data. The main content includes its advantages, characteristics, technical composition, development history, and applications in different directions. The development process of virtual reality technology is not long, but it has unique advantages and technologies specifically serving it. It does not require much physical participation and has positive implications in applications such as education, entertainment, and healthcare. Its future direction will be towards replacing real hardware with virtual hardware, becoming more practical, intelligent, and refined.

Approach to fuzzing testing of network interfaces of Linux family operating systems using hardware virtualization technology

The purpose of this research is to create a new approach to fuzzing testing of network interfaces of Linux family operating systems. The relevance of the research is due to the growing number of network attacks, the prevalence of Linux family operating systems on server hardware, and their use in the construction of cloud computing systems. According to data as of November 2021, among all web servers whose operating system is known, 38.9% use Linux family operating systems. In this work, the architecture and implementation of the Linux kernel networking stack are investigated. Current research in the field of Linux kernel security is analyzed.

GuaNary: Efficient Buffer Overflow Detection In Virtualized Clouds Using Intel EPT-based Sub-Page Write Protection Support

Write buffer overflow is a widespread and prevalent memory safety violation in C/C++, reported as the top vulnerability in 2022 and 2023. Secure memory allocators are generally used to protect systems against attacks that may exploit buffer overflows. Existing allocators mainly rely on two types of countermeasures to prevent or detect write overflows: canaries and guard pages, each with pros and cons in terms of detection latency and memory footprint. For virtualized cloud applications, this paper follows the Out of Hypervisor (OoH) trend and introduces GuaNary, a safety guard against write overflows, allowing synchronous detection at a low memory footprint cost. OoH is a new virtualization research axis introduced in 2022 advocating the exposure of hardware features for virtualization to the guest OS so that its processes can take advantage of them. Based on the OoH principle, GuaNary leverages Intel Sub-Page write Permission (SPP), a recent hardware virtualization feature that allows to write-protect guest memory at the granularity of 128B (namely, sub-page) instead of 4KB. We implement a software stack, LeanGuard, which promotes the utilization of SPP from inside virtual machines by new secure allocators that use GuaNary. Our evaluation shows that for the same number of protected buffers, LeanGuard consumes 8.3× less memory than SlimGuard, a recent state-of-art secure allocator. Further, for the same memory consumption, LeanGuard allows protecting 25× more buffers than SlimGuard.

Pervasive Micro Information Flow Tracking

Detection of advanced security attacks that exploit zero-day vulnerabilities or application-specific logic loopholes has been challenging due to the lack of attack signatures or substantial deviations in the overall system behavior. One has to zoom in to the affected code regions and look for local anomalies distinguishable from the benign workload to detect such attacks. We propose <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">pervasive micro information flow tracking</i> (P <sc xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">E</small> RMIT) that realizes variable-level online dynamic information flow tracking (DIFT) as a means to detect the attacks. The system uses hardware virtualization extension to monitor access to taint source variables and performs asynchronous code emulation to infer the local information flow. We demonstrate that the pervasive micro information flow can sufficiently capture the attacks and incurs only a small overhead. Given the program source code, the system can further enrich the semantics of micro information flow by embedding the variable names. We have integrated the system with machine learning algorithms to demonstrate the effectiveness of anomaly detection for zero-day attacks with pervasive micro information flow.

RShare: Alleviating long startup on the Cloud-rendering platform through de-systemization

WebGL paves the way for the great development of lightweight rendering applications (e.g., web games). However, the target audience of Cloud-rendering frameworks (e.g., Google Stadia and gRemote) mainly focuses on native applications, called traditional Cloud-rendering frameworks. Even though traditional frameworks cover all the rendering functionalities and both light- and heavy-weight applications can run on them, such frameworks face long startup latency, imposing a significant challenge on lightweight applications. To reduce the startup latency, many researchers render objects locally, but the system-level redundancy still affects the performance of lightweight rendering applications negatively (especially in the application-initialized stage).In this paper, we propose rShare, a new rendering framework dedicated to lightweight applications. To reduce the startup latency of lightweight applications, rShare desystemizes the entire user space into the transmitted protocol. To ensure the portability of the entire system, rShare establishes two vHALs (virtual Hardware Abstraction Layer) (i.e., peripheral vHAL and rendering vHAL) within the protocol. To boost the CPU running efficiency at the initialized stage, rShare establishes an optimized mechanism called flexTLB, allowing various page sizes to work together. The experiments show that rShare can improve the CPU executing efficiency by 20%∼50% and reduce 90% startup latency compared to the CARE, a traditional Cloud-rendering framework proposed by Intel.

Data Security of Mobile Cloud Computing on Cloud Server

Mobile cloud computing refers to the technology that allows services, such as software, virtual hardware, and bandwidth, to be delivered over the Internet. This technology primarily benefits mobile devices, particularly smartphones. The popularity of mobile cloud computing is rapidly increasing among consumers, and major companies like Apple, Google, Facebook, and Amazon have a large user base in this field. With the help of cloud storage services, users can conveniently access their data anytime, anywhere, and from any device, including mobile devices. While this provides flexibility and scalability in data management, it also introduces new security risks that need to be addressed. However, these security concerns can be mitigated by implementing appropriate data handling practices. Cloud server providers can enhance data security by employing encryption and decryption techniques when storing data in the cloud. In this study, we propose various encryption and decryption methods to safeguard data in the cloud, ensuring that confidential information remains inaccessible to unauthorized individuals or machines due to its encrypted form.

Development of a virtual hardware temperature observer for frequency-controlled asynchronous electric motors

One of the most common types of AC electric machines are asynchronous electric motors. Because of their simple and reliable design, they are used in many industries. In this paper, the object of research is an asynchronous electric motor with a short-circuited rotor. To ensure the normal operation of an asynchronous electric motor, the heating temperature of its active parts should not exceed the maximum permissible values, which are determined by the corresponding class of heat resistance of the insulation system used in the electric motor. In asynchronous electric motors, the stator winding is the most thermally vulnerable node, which is the first to fail when the temperature of the electric motor increases. Thermal protection devices protect an asynchronous electric motor from emergency operating modes accompanied by an unacceptable excess of the temperature of their windings. In order to build an indirect system of protection against overheating of the stator windings, a temperature observer has been developed using already available signals in a frequency-controlled electric drive. Simulation studies were performed in Matlab/Simulink application software packages. Simulation studies were carried out on the basis of asynchronous electric motors of the 4A series with a capacity of 30, 75 and 110 kW in the temperature range from 20 °C to 250 °C. As a result of the research, it was found that the error of indirect calculation of the temperature of electric motors, taking into account the correction factor, does not exceed 1 %. The proposed temperature observer can be used to build protections for asynchronous electric drives

ASM: An Adaptive Secure Multicore for Co-located Mutually Distrusting Processes

With the ever-increasing virtualization of software and hardware, the privacy of user-sensitive data is a fundamental concern in computation outsourcing. Secure processors enable a trusted execution environment to guarantee security properties based on the principles of isolation, sealing, and integrity. However, the shared hardware resources within the microarchitecture are increasingly being used by co-located adversarial software to create timing-based side-channel attacks. State-of-the-art secure processors implement the strong isolation primitive to enable non-interference for shared hardware, but suffer from frequent state purging and resource utilization overheads, leading to degraded performance. This paper proposes ASM , an adaptive secure multicore architecture that enables a reconfigurable, yet strongly isolated execution environment. For outsourced security-critical processes, the proposed security kernel and hardware extensions allow either a given process to execute using all available cores, or co-execute multiple processes on strongly isolated clusters of cores. This spatio-temporal execution environment is configured based on resource demands of processes, such that the secure processor mitigates state purging overheads and maximizes hardware resource utilization.

Implementasi Virtual Private Server untuk Mini Hosting

Virtual Private Server is a private server whose entire resource is used by one user only and is not influenced by other users. The technology used by VPS is virtualization of physical server hardware which is then divided into several different resources. Called virtual because this division uses software so that in one physical server there are several VPS running. To be more extensive in terms of server control, researchers use Public IP and Dedicated IP as a distributor of VPS systems from local to public. In addition, in this VPS implementation, debian linux and ubuntu linux are used as operating systems to create a VPS server. To get the value of the VPS network performance test from the client using the parameters of the Quality of Service (QoS), namely Delay and Jitter. From the test results, the value of the VPS server resource obtained can be categorized as very good and feasible to be implemented with an average server CPU load of 2.9%, memory 71.23%, disk space 16.1%. And testing the QoS parameters (delay, jitter) also gets good performance and has a fairly low value obtained with an average delay value of 6-37.24%, jitter of 8.95-59.95%.

HEMC: A Dynamic Behavior Analysis System for Malware based on Hardware Virtualization

HEMC: A Dynamic Behavior Analysis System for Malware based on Hardware Virtualization

KHV: KVM-Based Heterogeneous Virtualization

A KVM (Kernel-based Virtual Machine) is subject to the complexity of the Linux kernel and the difficulty and cost of safety certification; thus, it is not popularized in embedded high-reliability scenarios. This paper proposes a KVM-based Heterogeneous Virtualization (KHV), which is independent of hardware virtualization (KVM mandatory virtualization), follows the principle of static partitioning, localizes the hypervisor, and inherits the KVM software ecosystem. KHV balances the demands of static partitioning and flexible sharing in the embedded system. The paper implemented KHV on the RISC-V Xuantie C910 CPU-based SoC and conducted a performance comparison with KVM. The experiment shows that KHV is 50% smaller than KVM in terms of fluctuation, and KHV makes the guest OS have the same performance as the bare-metal OS in scheduler benchmarks, whereas KVM dropped an average of 28%.

APPLICATION OF SOLAR ENERGY TO MEASURE PHOTOVOLTAIC CAPACITY AND BATTERY OPTIMIZATION

This study uses the Markov Decision Model (MDP) to implement battery degradation and optimize battery use in Photovoltaic and the battery system model created. The battery optimization scheme for home loads uses the application of solar energy to optimally measure photovoltaic and battery capacity against each other. The different qualities of the standard used in this study are described starting from system characteristics and charge settings to an analysis of MDP and battery degeneration. Various systems undergo a list of analyses to implement awareness reasoning although developing battery volume and photovoltaic for the current system. The parametric span of cosmic and battery central tariff, the tariff of power worn taken away the framework, tariff of battery degeneration, time of year, photovoltaic generator size, battery size, and Health Status (SoH) of batteries were carried out to determine the optimal volume estimate and analyze the trade-offs essential in a mix scheme. This is then used to treasure trove the minimum amount of fee of the scheme with photovoltaic and battery application.&#x0D; This study support decision of the essential sizing deliberation for photovoltaic and battery-managed home loads linked to the services grid. Insightful that the battery can be used more destructively, also it can be formed lower and run at a greater C speed. This study analyzes actual fog computing research tools and storage composition algorithms for fog computing and develops a fog computing monitoring framework to provide data for fog computing storage composition algorithms. The framework proposed in this study provides granular container virtual hardware resource information and black box monitoring of service layer information associated with microservices. Framework usefulness on Raspberry Pis and CPU overhead of framework tested.&#x0D; The results of this study present the framework proposed could be used on single-chip microcomputers with relatively inadequate computational performance. In addition, a minimal effect on the battery degeneration system on the MDP decision due to the low system C-rate limit for the battery and interesting behavior of total fee and demand is also found. For future research, testing different maximum C levels should be considered to determine the photovoltaic size and battery system affected. Various battery optimization systems can be proved to check the benefit and disbenefits in the microgrid system case study. Lastly, collecting a scheme for actual-time reproduction to know how nice the operation is performing is the next stage of implementing MDP for battery management and system development.

SCOPE and EaaSI: Software Emulation and the Future of Architectural History

SCOPE and EaaSI: Software Emulation and the Future of Architectural History

Formal Specification and Verification of Data Separation for Muen Separation Kernel

Introduction: Development of integrated mixed-criticality systems is becoming increasingly popular for application-specific systems, which needs separation mechanism for available onboard resources and the processors equipped with hardware virtualization. Hardware virtualization allow the partitions to physical resources, which include processor cores, memory, and I/O devices, among guest virtual machines (VMs). For building mixed criticality computing environment, traditional virtual machine systems are inappropriate because they use hypervisors to schedule separate VMs on physical processor cores. In this article, we discuss the design of an environment for mixed-criticality systems: The Muen an x86/64 separation kernel for high assurance. The Muen Separation Kernel is an Open Source microkernel which has no runtime errors at the source code level. The Muen separation kernel has been designed precisely to encounter the challenging requirements of high-assurance systems built on the Intel x86/64 platform. Muen is under active development, and none of the kernel properties of it has been verified yet. In this paper, we present a novel work of verifying one of the kernel properties formally. Method: The CTL used in NuSMV is a first-order modal along with data-depended processes and regular formulas. CTL is a branching-time logic, meaning that its model of time is a tree-like structure in which the future is not determined; there are different paths in the future, any one of which might be an actual path that is realized . This section shows the verification of all the requirements mentioned in section 3. In NuSMV tool the command used for verification of the formulas written in CTL is checkctlspec -p ”CTL-expression”. The nearest quantifier binds each occurrence of a variable in the scope of the bound variable, which has the same name and the same number of arguments. Result: Formal methods have been applied to various projects for specification and verification purpose. Some of them are the SCOMP , SeaView , LOCK,and Multinet Gateway projects. The TLS was written formally. Several mappings were done between the TLS and the SCOMP code: Informal English language to TLS, TLS to actual code , and TLS to pseudo-code. The authors present an ACL2 model for a generic separation kernel also known as GWV approach. Conclusion: We consider the formal verification of data separation property which is one of the crucial modules to achieve the separation functionality. The verification of the data separation manager is carried out on the design level using the NuSMV tool. Furthermore, we present the complete model of the data separation unit along with its code written in the NuSMV modelling language. Finally, we have converted the non-functional requirements into the formal logic, which then has verified the model formally.

Performance modeling of file system pairs in hypervisor-based virtual environment applied on KVM hypervisor case study

This paper proposed an approach to mathematical modeling of the file system performance in a hypervisor-based virtual environment, with special focus on the file system pair interactions. The main goal of this research is to conduct an in-depth analysis of the filesystem pair behavior with respect to the performance costs originating from the employed technologies, such as H-Trees, B-Trees and Copy-on-Write/Overwrite update method, and different application workload types. The modeling provides a collection of hypotheses about the expected behavior. The modeling and the hypotheses are validated based on the results obtained for a specific case study. Our study reports on a file system performance comparison in the context of KVM hypervisor-based full hardware virtualization, application-level benchmarking, and 64-bit Linux filesystems Ext4, XFS, and Btrfs. The Filebench benchmark tool is applied for comprehensive testing of the filesystem performance under fair-play conditions. According to the obtained results, we provide a set of recommendations (i.e., a Knowledge Data Base) for optimal filesystem pair selection for the KVM hypervisor. Finally, it is important to note that the proposed modeling is also applicable to other hypervisor-based virtualizations.

A Labeled Architecture for Low-Entropy Clouds: Theory, Practice, and Lessons

Resource efficiency and quality of service (QoS) are both long-pursuit goals for cloud providers over the last decade. However, hardly any cloud platform can exactly achieve them perfectly even until today. Improving resource efficiency or resource utilization often could cause complicated resource contention between colocated cloud applications on different resources, spanning from the underlying hardware to the software stack, leading to unexpected performance degradation. The low-entropy cloud proposes a new software-hardware codesigned technology stack to holistically curb performance interference from the bottom up and obtain both high resource efficiency and high quality of application performance. In this paper, we introduce a new computer architecture for the low-entropy cloud stack, called labeled von Neumann architecture (LvNA), which incorporates a set of label-powered control mechanisms to enable shared components and resources on chip to differentiate, isolate, and prioritize user-defined application requests when competing for hardware resource. With the power of these mechanisms, LvNA was able to protect the performance of certain applications, such as latency-critical applications, from disorderly resource contention while improving resource utilization. We further build and tapeout Beihai, a 1.2 GHz 8-core RISC-V processor based on the LvNA architecture. The evaluation results show that Beihai could drastically reduce the performance degradation caused by memory bandwidth contention from 82.8% to 0.4%. When improving the CPU utilization over 70%, Beihai could reduce the 99th tail latency of Redis from 115 ms to 18.1 ms. Furthermore, Beihai can realize hardware virtualization, which boots up two unmodified virtual machines concurrently without the intervention of any software hypervisor.

Метод обеспечения устойчивости вычислительного процесса в условиях воздействия вредоносных программ

Objective: develop a method and means to ensure sustainable functioning of the software mission-critical information systems under impact malicious software. Methods: analysis and classification of malicious software and means of protection against it, synthesis and modeling of correct behavior of programs, temporary automata. Study results: the characteristic of methods and means of detecting malware, which using masking methods, rootkit mechanisms and hardware virtualization technologies is given. A methodology for constructing profiles of the correct functioning of controlled programs in the form of a set of permissible execution routes has been developed. A method for monitoring and controlling the correctness of the current state of the computing process by comparing it with reference profiles has been developed. The method allows real-time detection and counteraction of malicious programs, which using various techniques of implementation and masking, including rootkit mechanisms, hypervisors based on hardware virtualization technology, interception and introduction in system functions in RAM.

Fully Immersive Virtual Reality in Logistics Modelling and Simulation Education

With the increasing development and popularisation of information and communication technology, new challenges are posed to higher education in the modernisation of teaching in order to make education and training of students as effective as possible. It is therefore very important to develop and experiment with appropriate development tools, explore their benefits and effectiveness, and integrate them into existing learning strategies. The emergence of a computer-generated digital environment that can be directly experienced, actions that can determine what is happening in it, growth of technological characteristics, and decline in prices of virtual reality hardware leads to a situation that cannot be ignored. This paper investigated users' perceptions on the potential use of fully immersive virtual reality head-mounted displays in a discrete-event simulation of logistics processes. The dynamic nature of virtual environments requires active participation which causes greater engagement, motivation, and interest aided by interaction and challenges.