传统的面向过程式的元级程序设计系统存在一些弊端,如指针操作容易出错等。尤其当处理的语言文法规则过多时,过于频繁的指针操作会降低系统的稳定性和可靠性。为此,采用面向对象的元程序设计方法,使用基于文法的抽象语法树描述中间表示...传统的面向过程式的元级程序设计系统存在一些弊端,如指针操作容易出错等。尤其当处理的语言文法规则过多时,过于频繁的指针操作会降低系统的稳定性和可靠性。为此,采用面向对象的元程序设计方法,使用基于文法的抽象语法树描述中间表示,将元级操作封装成类,构造了面向对象的元级程序设计系统OOMPS(Ob ject-O riented M etaprogramm ing System)。该系统利用类的继承机制以及对象与其成员函数之间的关系来代替指针操作,避免了指针带来的各种问题。基于该方法,实现了全系统简明测试语言ATLAS(Abbrevi-ated Test Language for A ll System s,该语言的文法规则大约有2 680条)的元程序设计系统ATLAS-MPS。试验表明,该系统效果优良,并具有稳定性及可扩充性。展开更多
Recently,virtualization technologies have been widely used in industry.In order to monitor the security of target systems in virtualization environments,conventional methods usually put the security monitoring mechani...Recently,virtualization technologies have been widely used in industry.In order to monitor the security of target systems in virtualization environments,conventional methods usually put the security monitoring mechanism into the normal functionality of the target systems.However,these methods are either prone to be tempered by attackers or introduce considerable performance overhead for target systems.To address these problems,in this paper,we present a concurrent security monitoring method which decouples traditional serial mechanisms,including security event collector and analyzer,into two concurrent components.On one hand,we utilize the SIM framework to deploy the event collector into the target virtual machine.On the other hand,we combine the virtualization technology and multi-core technology to put the event analyzer into a trusted execution environment.To address the synchronization problem between these two concurrent components,we make use of Lamport's ring buffer algorithm.Based on the Xen hypervisor,we have implemented a prototype system named COMO.The experimental results show that COMO can monitor the security of the target virtual machine concurrently within a little performance overhead.展开更多
文摘传统的面向过程式的元级程序设计系统存在一些弊端,如指针操作容易出错等。尤其当处理的语言文法规则过多时,过于频繁的指针操作会降低系统的稳定性和可靠性。为此,采用面向对象的元程序设计方法,使用基于文法的抽象语法树描述中间表示,将元级操作封装成类,构造了面向对象的元级程序设计系统OOMPS(Ob ject-O riented M etaprogramm ing System)。该系统利用类的继承机制以及对象与其成员函数之间的关系来代替指针操作,避免了指针带来的各种问题。基于该方法,实现了全系统简明测试语言ATLAS(Abbrevi-ated Test Language for A ll System s,该语言的文法规则大约有2 680条)的元程序设计系统ATLAS-MPS。试验表明,该系统效果优良,并具有稳定性及可扩充性。
基金supported in part by National Natural Science Foundation of China(NSFC)under Grant No.61100228 and 61202479the National High-tech R&D Program of China under Grant No.2012AA013101+1 种基金the Strategic Priority Research Program of the Chinese Academy of Sciences under Grant No.XDA06030601 and XDA06010701Open Found of Key Laboratory of IOT Application Technology of Universities in Yunnan Province Grant No.2015IOT03
文摘Recently,virtualization technologies have been widely used in industry.In order to monitor the security of target systems in virtualization environments,conventional methods usually put the security monitoring mechanism into the normal functionality of the target systems.However,these methods are either prone to be tempered by attackers or introduce considerable performance overhead for target systems.To address these problems,in this paper,we present a concurrent security monitoring method which decouples traditional serial mechanisms,including security event collector and analyzer,into two concurrent components.On one hand,we utilize the SIM framework to deploy the event collector into the target virtual machine.On the other hand,we combine the virtualization technology and multi-core technology to put the event analyzer into a trusted execution environment.To address the synchronization problem between these two concurrent components,we make use of Lamport's ring buffer algorithm.Based on the Xen hypervisor,we have implemented a prototype system named COMO.The experimental results show that COMO can monitor the security of the target virtual machine concurrently within a little performance overhead.
