{"id":237549,"updated":"2025-01-19T08:50:56.201627+00:00","links":{},"created":"2025-01-19T01:40:14.279658+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00237549","sets":["1164:1867:11465:11705"]},"path":["11705"],"owner":"44499","recid":"237549","title":["コンフィデンシャル仮想マシンのためのライブマイグレーション最適化手法"],"pubdate":{"attribute_name":"公開日","attribute_value":"2024-08-01"},"_buckets":{"deposit":"6205ffe4-5579-4cca-b03c-65dc894bf4be"},"_deposit":{"id":"237549","pid":{"type":"depid","value":"237549","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"コンフィデンシャル仮想マシンのためのライブマイグレーション最適化手法","author_link":["650443","650444","650445"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"コンフィデンシャル仮想マシンのためのライブマイグレーション最適化手法"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"セキュリティ","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2024-08-01","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"慶應義塾大学"},{"subitem_text_value":"慶應義塾大学"},{"subitem_text_value":"慶應義塾大学"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/237549/files/IPSJ-OS24164004.pdf","label":"IPSJ-OS24164004.pdf"},"date":[{"dateType":"Available","dateValue":"2026-08-01"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-OS24164004.pdf","filesize":[{"value":"1.2 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"11"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"80d539d5-256f-4675-9f9d-1131e846efe1","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2024 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"白石, 椋聖"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"畑, 輝史"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"河野, 健二"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN10444176","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8795","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"コンフィデンシャル仮想マシン(VM)では,ハイパーバイザによる不正攻撃があっても VM 内のメモリの秘匿性が保証できる.CPU が管理する暗号鍵を用いてメモリコントローラで暗号化を行うため,暗号鍵が CPU 外部に漏洩することがなく高い秘匿性を保証する.しかし,VM の移送を行う場合,暗号化に起因するオーバーヘッドにより移送時間およびダウンタイムが長くなる傾向がある.暗号鍵の漏洩を防ぐため,移送のための新たな鍵を共有し,その鍵で暗号化してメモリ内容を送信する.さらに,移送先では復号後に移送先の鍵での再暗号化が必要である.結果として,移送中に更新されるページ(dirty page)の個数が減少しにくく,Stop-and-copy 時に送信するページ数も増大する.本論文では,ダウンタイムの増大を防ぐため,1) 暗号化のバッチ処理と 2) vCPU throttling を行う.暗号処理のバッチ化では,連続した物理ページの暗号処理をまとめることにより,1 ページあたりの暗号化処理時間の短縮を図る.また,vCPU throttling によって,Pre-copy 中の dirty page の数を減少させ,移送時間とダウンタイムの短縮を図る.これらの手法を AMD SEV(EPYC 7763 Processor),QEMU 5.0.50 および Linux KVM 5.7.0 に適用して評価を行った結果,暗号処理のバッチ化による移送時間とダウンタイムの短縮,および vCPU throttling によるダウンタイムの短縮が確認できた.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"7","bibliographic_titles":[{"bibliographic_title":"研究報告システムソフトウェアとオペレーティング・システム(OS)"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2024-08-01","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"4","bibliographicVolumeNumber":"2024-OS-164"}]},"relation_version_is_last":true,"weko_creator_id":"44499"}}