AUTOMATICALLY BRIDGING THE SEMANTIC GAP IN MACHINE INTROSPECTION

摘要

Disclosed are various embodiments that facilitate automatically bridging the semantic gap in machine introspection. It may be determined that a program executed by a first virtual machine is requested to introspect a second virtual machine. A system call execution context of the program may be determined in response to determining that the program is requested to introspect the second virtual machine. Redirectable data in a memory of the second virtual machine may be identified based at least in part on the system call execution context of the program. The program may be configured to access the redirectable data. In various embodiments, the program may be able to modify the redirectable data, thereby facilitating configuration, reconfiguration, and recovery operations to be performed on the second virtual machine from within the first virtual machine.

主权项

1. A system, comprising:
at least one computing device; a first virtual machine executable by the at least one computing device; a second virtual machine executable by the at least one computing device; and an introspection system executable by the at least one computing device, the introspection system being configured to:
determine that a program executed by the first virtual machine is requested to introspect the second virtual machine;determine a system call execution context of the program in response to determining that the program is requested to introspect the second virtual machine;identify redirectable data in a memory of the second virtual machine based at least in part on the system call execution context of the program; andconfigure the program to access the redirectable data.