My EuroSe'11 paper was a attack on memory deduplication, but my USENIX HotSe'10 paper was a proposal to increase security of Guest OS using memory deduplication (KSM). Title: Moving from Logical Sharing of Guest OS to Physical Sharing of Deduplication on Virtual Machine Paper: http://www.usenix.org/events/hotsec10/tech/full_papers/Suzaki.pdf Slide: http://www.usenix.org/events/hotsec10/tech/slides/suzaki.pdf The related talk was presented at LinuxCon Japan 2010 (Sep) http://events.linuxfoundation.org/slides/2010/linuxcon_japan/linuxcon_jp2010_suzaki.pdf The basic idea is to replace dynamic link with static link, but current applications are not easy to replace, becase of license problem and plug-ins. Our proposal to use a tool to integrate libraries to an ELF binaries. The increase of memory consumption is mitigated by memory deduplication. The original idea was proposed by "SLINLY" at USENIX ATC 2005, but it requires many customizations. http://www.usenix.org/event/usenix05/tech/general/collberg.html ------ suzaki -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
