Efficiently tracking application interactions using lightweight virtualization
Yih Huang, Angelos Stavrou, A. K. Ghosh, Sushil Jajodia · 2008
In this paper, we propose a general-purpose framework that harnesses the power of lightweight virtualization to track applications interactions in a scalable an efficient manner. Our goal is to use our framework for application auditing, intrusion detection, analysis, and system recovery from both malicious attacks and programmatic faults. In our framework, we construct each virtualized environment (VE) in a novel way that limits the scope and type of application events that need to be monitored.