Dynamic measurement of an operating system in a virtualized system
First Claim
1. A method comprising:
- accessing a dirty bitmap associated with an operating system execution, the dirty bitmap comprising an indication of memory locations that have been modified since a previous access;
analyzing the dirty bitmap to determine one or more memory locations associated with the operating system to measure; and
measuring the determined memory locations to produce measurements of the memory locations.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems, methods, and media for dynamic measurement of operating systems in a virtualized system are disclosed. Some embodiments may include accessing a dirty bitmap associated with an operating system executing in a virtualized system where the dirty bitmap may include an indication of memory locations that have been modified since a previous access. Embodiments may also include analyzing the dirty bitmap to determine one or more memory locations associated with the operating system to measure and measuring the determined memory locations to produce measurements of the memory locations. Embodiments may also include performing an action based on the measurements of the memory locations. Other embodiments are disclosed and claimed.
-
Citations
29 Claims
-
1. A method comprising:
-
accessing a dirty bitmap associated with an operating system execution, the dirty bitmap comprising an indication of memory locations that have been modified since a previous access; analyzing the dirty bitmap to determine one or more memory locations associated with the operating system to measure; and measuring the determined memory locations to produce measurements of the memory locations. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. An article comprising a machine-readable medium that contains instructions, which when executed by a processing platform, cause said processing platform to perform operations comprising:
-
accessing a dirty bitmap associated with an operating system executing in a virtualized system, the dirty bitmap comprising an indication of memory locations that have been modified since a previous access; analyzing the dirty bitmap to determine one or more memory locations associated with the operating system to measure; and measuring the determined memory locations to produce measurements of the memory locations. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18)
-
-
19. A virtual machine environment system, comprising:
-
a virtual machine monitor (VMM); a first virtual machine, the first virtual machine comprising a guest operating system; and a measurement agent to iteratively measure memory associated with the guest operating system, the measurement agent comprising; a dirty bitmap analyzer to access and analyze a dirty bitmap associated with the guest operating system to determine one or more memory locations associated with the operating system that have changed since a previous access; and a measurement module to measure the determined memory locations to produce measurements of the memory locations. - View Dependent Claims (20, 21, 22, 23, 24)
-
-
25. A measurement agent system, comprising:
-
a dirty bitmap analyzer to access and analyze a dirty bitmap associated with a guest operating system to determine one or more memory locations associated with the operating system that have changed since a previous access; a measurement module to measure the determined memory locations to produce measurements of the memory locations; and an operating system integrity module to perform an action based on the measurements of the memory locations. - View Dependent Claims (26, 27, 28, 29)
-
Specification