On the Design of Virtual Machine Sandboxes for Distributed Computing in Wide-area Overlays of Virtual Workstations

Wolinsky, David Isaac; Agrawal, Abhishek; Boykin, P. Oscar; Davis, Justin R.; Ganguly, Arijit; Paramygin, Vladimir A.; Sheng, Y. Peter; Figueiredo, Renato

doi:10.1109/vtdc.2006.8

Cited by 30 publications

(35 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The TCP/IP traffic that is generated by a VM is completely confined to the virtual network, as described in [27]. Archer hosts are authenticated and traffic is encrypted end-to-end by deploying an security stack in each VM based on public key cryptography (PKI).…”

Section: Security Considerationsmentioning

confidence: 99%

“…User data and local configurations remain unmodified in the VM after the upgrade as they are stored in different stacks of the file system [27].…”

Section: Security Considerationsmentioning

confidence: 99%

“…Reducing the overhead introduced by virtual machines is an active area of research and development in academia and industry, and the expected trend is for these overheads to be reduced. With the use of a different VM technology (Xen) which we also plan to support on Archer, the overhead due to virtualization for this simulator is only 1% [27].…”

Section: Performance Considerationsmentioning

confidence: 99%

See 2 more Smart Citations

Archer: A Community Distributed Computing Infrastructure for Computer Architecture Research and Education

Figueiredo

Boykin

Fortes

et al. 2009

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

This paper introduces Archer, a community-based computing resource for computer architecture research and education. The Archer infrastructure integrates virtualization and batch scheduling middleware to deliver high-throughput computing resources aggregated from resources distributed across wide-area networks and owned by different participating entities in a seamless manner. The paper discusses the motivations leading to the design of Archer, describes its core middleware components, and presents an analysis of the functionality and performance of a prototype wide-area deployment running a representative computer architecture simulation workload.

show abstract

Section: Security Considerationsmentioning

confidence: 99%

“…User data and local configurations remain unmodified in the VM after the upgrade as they are stored in different stacks of the file system [27].…”

Section: Security Considerationsmentioning

confidence: 99%

Section: Performance Considerationsmentioning

confidence: 99%

See 1 more Smart Citation

Archer: A Community Distributed Computing Infrastructure for Computer Architecture Research and Education

Figueiredo

Boykin

Fortes

et al. 2009

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

show abstract

“…As an example, a VCN can exploit its own routing strategy and use ad hoc algorithms to map information onto the VMs. [19] considers VM sandboxes to simplify the deployment of collaborative environments over wide-area networks. VM sandboxes are virtual appliances [20], configured and developed by the administrators of the collaborative environments, and made available to multiple users.…”

Section: Related Workmentioning

confidence: 99%

Managing Critical Infrastructures through Virtual Network Communities

Baiardi

Sala

Sgandurra

2008

Critical Information Infrastructures Security

View full text Add to dashboard Cite

Abstract. Virtual Interacting Network CommunIty (Vinci) is an abstract architecture to share in a secure way an ICT infrastructure among several user communities, each with its own applications and security requirements. To each community, Vinci allocates a network of virtual machines (VMs) that is mapped onto the computational and communication resources of the infrastructure. Each network includes several kinds of VMs. Application VMs (APP-VMs) run applications and stores information shared within a community. File system VM (FS-VMs) store and protect files shared among communities by applying a combination of MAC and Multi-Level Security (MLS) policies. A firewall VM (FW-VM) is a further kind of VM that, according to the security policy of each community, protects information private to a community transmitted across an untrusted network or controls the information exchanged with other communities. The last kind of VM is the administrative VM (A-VM) that configures and manages the other VMs in a community as well as the resources of each physical node and it also assures the integrity of all the VMs.After describing the overall Vinci architecture, we present and discuss the implementation and the performance of a first prototype.

show abstract

“…Some of popular volunteer computing systems are BOINC [5], condorlike grid system [6][7][8], Entropia [9], XtremeWeb [10], Aneka [11], SZTAKI [12], QADPZ [13], and IPOP/WOW [14]. Peer-to-Peer (P2P) based VC systems represent a decentralized, self-organized, and scalable environment for running applications such as PastryGrid [15], BonjourGrid [16], ShareGrid [17], Condor-Flock P2P [18], and Self-Gridron [19].…”

Section: Introductionmentioning

confidence: 99%

A proximity-aware load balancing in peer-to-peer-based volunteer computing systems

et al. 2013

View full text Add to dashboard Cite

One of the main challenges in peer-to-peer based volunteer computing systems is efficient resource discovery algorithm. Load balancing is a part of resource discovery algorithm and aims to minimize the overall response time of the system. This paper introduces an analytical model based on distributed parallel queues to optimize the average response time of the system in a distributed manner. The proposed resource discovery algorithm consists of two phases. In the first phase, it selects peers in a load-balanced manner based on QoS constraints of request. In the second phase, a proximity-aware feature is applied to select the peer with minimum communication overhead among selected peers in the first phase. Two dispatching strategies are proposed for the load balancing based on stochastic analysis of routing in the distributed parallel queues. These policies adopt probabilistic and deterministic sequences to redirect requests to the capable peers in the system. Simulation results show that the proposed resource discovery algorithm improves the response time of user's requests by a factor of 1.8 under a moderate load.

show abstract

On the Design of Virtual Machine Sandboxes for Distributed Computing in Wide-area Overlays of Virtual Workstations

Cited by 30 publications

References 27 publications

Archer: A Community Distributed Computing Infrastructure for Computer Architecture Research and Education

Archer: A Community Distributed Computing Infrastructure for Computer Architecture Research and Education

Managing Critical Infrastructures through Virtual Network Communities

A proximity-aware load balancing in peer-to-peer-based volunteer computing systems

Contact Info

Product

Resources

About