A high-performance virtual machine filesystem monitor in cloud-assisted cognitive IoT

Abstract

Cloud-assisted Cognitive Internet of Things has powerful data analytics abilities based on the computing and data storage capabilities of cloud virtual machines, which makes protecting virtual machine filesystem very important for the whole system security. Agentless periodic filesystem monitors are optimal solutions to protect cloud virtual machines because of the secure and low-overhead features. However, most of the periodic monitors usually scan all of the virtual machine filesystem or protected files in every scanning poll, so lots of secure files are scanned again and again even though they are not corrupted. In this paper, we propose a novel agentless periodic filesystem monitor framework for virtual machines with different image formats to improve the performance of agentless periodic monitors. Our core idea is to minimize the scope of the scanning files in both file integrity checking and virus detection. In our monitor, if a file is considered secure, it will not be scanned when it has not been modified. Since our monitor only scans the newly created and modified files, it can check less files than other filesystem monitors. To that end, we propose two monitor methods for different types of virtual machine disks to reduce the number of scanning files. For virtual machine with single disk image, we hook the backend driver to capture the disk modification information. For virtual machine with multiple copy-onwrite images, we leverage the copy-on-write feature of QCOW2 images to achieve the disk modification analysis. In 2 addition, our system can restore and remove the corrupted files. The experimental results show that our system is effective for both Windows and Linux virtual machines with different image formats and can reduce the number of scanning files and scanning time.

Digital Twin in the IoT Context: A Survey on Technical Features, Scenarios, and Architectural Models

“…Recent techniques for rapid recovery and restoration of virtual machines [167] [168] [169] can be adopted to provide these required capabilities. For instance, some experiments have been carried out in [170] [171]. Moreover, the same logical object and its components may be made available to different users, and so there is the need to support multitenancy and shared usage [172], [173].…”

A Survey on Data Perception in Cognitive Internet of Things

“…Such joint supervision guarantees that a definitive hash codes delivered by the learned hash functions keep up sentiment level closeness. Zhan et al [18] have proposed the cloud assisted CIoT in view of the registering and information storage capacities of cloud virtual machines, which make ensuring virtual machine, file system critical for the entire framework security. Agent less intermittent file system screens are ideal solutions for ensure cloud virtual machines on account of the safe and low-overhead highlights.…”