A Novel Model for Critical Services Consolidation Based on FVM
Xiaosong Zhang, Ting Chen, Ding Wang · 2009
Current approaches to detect Internet threats prove incapable of consolidating critical services because detection usually takes places later than attacks. One traditional approach to protect critical services is patching, but it cannot take effect until the patches is distributed. This paper proposes a novel model (SCF) for critical services consolidation based on Feather weight Virtual Machine (FVM). We have two major contributions. The first contribution is the design of SCF to be able to consolidate critical services from being compromised even by unknown attacks. The second is high performance by using FVM. We tested SCF by couples of real world exploits. Experiments demonstrate that SCF can protect critical services from compromise with low overhead.