Submitted by GUSTAVO CESAR BRUSCHI null (gustavo@bruschi.net) on 2016-06-30T22:02:25Z No. of bitstreams: 1 Dissertacao_GustavoBruschi_FINAL(CORRIGIDO)_v2.pdf: 2377456 bytes, checksum: 41a5c87825aeb7131a629aee63fc450d (MD5) / Rejected by Ana Paula Grisoto (grisotoana@reitoria.unesp.br), reason: Solicitamos que realize uma nova submissão seguindo a orientação abaixo: O arquivo submetido está sem a ficha catalográfica. A versão submetida por você é considerada a versão final da dissertação/tese, portanto não poderá ocorrer qualquer alteração em seu conteúdo após a aprovação. Corrija esta informação e realize uma nova submissão contendo o arquivo correto. Agradecemos a compreensão. on 2016-07-04T18:38:19Z (GMT) / Submitted by GUSTAVO CESAR BRUSCHI null (gustavo@bruschi.net) on 2016-07-05T13:38:34Z No. of bitstreams: 2 Dissertacao_GustavoBruschi_FINAL(CORRIGIDO)_v2.pdf: 2377456 bytes, checksum: 41a5c87825aeb7131a629aee63fc450d (MD5) Dissertacao_GustavoBruschi_FINAL(CORRIGIDO)_v2.pdf: 2402200 bytes, checksum: 7d077bcd92c83a83ef1a9502d794312d (MD5) / Approved for entry into archive by Ana Paula Grisoto (grisotoana@reitoria.unesp.br) on 2016-07-07T16:26:49Z (GMT) No. of bitstreams: 1 bruschi_gc_me_sjrp.pdf: 2402200 bytes, checksum: 7d077bcd92c83a83ef1a9502d794312d (MD5) / Made available in DSpace on 2016-07-07T16:26:49Z (GMT). No. of bitstreams: 1 bruschi_gc_me_sjrp.pdf: 2402200 bytes, checksum: 7d077bcd92c83a83ef1a9502d794312d (MD5) Previous issue date: 2016-06-01 / A Computação em Nuvem tornou-se sinônimo de qualidade e eficiência em investimento na área de Tecnologia de Informação, criando novos desafios para o processamento e integração de dados. O desempenho da solução adotada é um ponto chave para o sucesso de uma solução em Nuvem, assim como a maneira como as máquinas virtuais realizam a leitura e gravação no armazenamento, podem ser determinantes para uma melhor utilização desta solução. Este trabalho apresenta o StackAct, um mecanismo que permite realizar o monitoramento e obter dados, em uma Nuvem IaaS, relativos ao consumo de recursos computacionais de uma solução em três camadas utilizando orquestrador Apache CloudStack com hypervisor XenServer e armazenamento dos dados no sistema Openfiler. Foram realizados testes de desempenho utilizando três diferentes tipos de perfil de instâncias em uma nuvem computacional privada, possibilitando mensurar os consumos de CPU, E/S e Memória nas três camadas envolvidas, com diferentes tipos de ofertas de serviços. Os testes resultaram em um comparativo entre cada item analisado para cada camada individual, onde foi possível detectar uma pequena variação entre as diferentes configurações de testes devido a forma como a camada do hypervisor enfileira as requisições realizadas pela camada do orquestrador. Já no comparativo realizado entre as camadas, foi possível constatar o alto consumo de disco na camada de armazenamento de dados, em especial E/S de gravação de dados, que levaram a realização de outros testes utilizando disco de estado sólido na camada de armazenamento, tendo um grande impacto no desempenho da solução como um todo. Foi detectado também um alto consumo de memória na camada hypervisor, que é justificada pela alocação do próprio hypervisor além das VMs que estão sendo criadas e utilizadas no processo. / Cloud Computing has become synonymous of quality, efficiency, and return of investment in Information Technology, creating new challenges for processing and data integrations. The performance of the adopted solution is a key to the success of a solution on Cloud, as well as the way that virtual machines use reading and writing to storage, which can be decisive for a better use of this solution. This work presents the StackAct, a mechanism that allows for monitoring and obtaining data on the consumption of computing resources of a solution in three layers using orchestrator IaaS Apache CloudStack with XenServer hypervisor and storage of data on the NAS OpenFiler system. Based on this mechanism, performance tests were conducted using three different instances of a private cloud. CPU, I/O, and memory usages in the three layers involved were measured with different types of loads. The tests resulted in a comparison between each item analyzed for each individual layer, and it was possible to detect a slight variation between the different configurations of tests because of the way that the hypervisor layer queues the requests made by the orchestrator layer. In the comparison made between the layers, it was possible to high consumption of disk in the data storage layer, in particular I/O data recording, which led to other tests using solid state disk in the storage layer, having an high impact on the performance of the solution as a whole. It was also detected high memory in the hypervisor layer, which is justified by the allocation of the hypervisor itself beyond the VMs being created and used in the process.

Meltdown and Spectre are two vulnerabilities discovered in 2017. These vulnerabilities allow unauthorized users to extract confidential information from systems. Security patches have been developed to resolve these vulnerabilities, but with a potental performance loss. This report investigates how PHP is affected by Microsofts web server IIS, with the security patch developed by Microsoft to protect systems against Meltdown and Spectre applied. In a practical laboratory experiment, the JMeter tool has been used to create a simulated load on the web server system, where PHPts CPU usage is monitored and noted for further analysis. The result shows that there has been a 13.74% performance loss with Microsofts security patch applied. This opens up for discussion about what Microsofts security patch actually does in a system, and if there is a suffciently large degradation to consider a transition to another solution.

Educational centers are investigating the feasibility of creating InfoSec laboratory for their students in order to enhance their practical experience. Experiments could be performed in either physical or virtual labs. The advantage of virtual lab compared to physical lab is utilization of minimal components with the aid of hypervisor software. In addition, reverting back computer configuration to original state rapidly, capability of altering resource configuration immediately and managing all virtual machines via a single console are some features that highlighted the use of this technology in the laboratories. Despite the virtual laboratory tremendous advantages, literature lacks a comprehensive review on implemented virtual labs. The purpose of this thesis is to fill this gap by inspecting the implemented virtual labs in education center. Consequently, the thesis outcome would provide an insight to other institutes and researchers to utilize these labs as models to decrease the effort and expenses for implementing InfoSec labs. The offered assignments of these labs would be elaborated in order to provide a sample for execution of these experiments for other researchers in their own environment. Furthermore, comparison of the discovered virtual labs based on availability, maintainability and security would be performed. Finally, a suggested physical layout of virtual lab is being presented. Twelve universities had been scrutinized which are aligned with the thesis goal.

Virtualization allows computer users to utilize their resources more efficiently and effectively. Operating system that runs on top of the Virtual Machine or Hypervisor is called guest OS. The Virtual Machine is an abstraction of the real physical machine. The main aim of this thesis work was to analyze different kinds of virtualization software packages and to investigate their advantages and disadvantages. In addition, we analyzed the performance of the virtual software packages with a real operating system in terms of web services. Web Servers play an important role on the Internet. The response time and throughput for a web server are different for different virtualization software packages and between a real host and a virtual host. In this thesis, we analyzed the web server performance on Linux. We compared the throughput for three different virtualization software packages (VMware, QEMU, and Virtual Box). The performance results clearly indicate that the real machine performance is better than the performance of the virtual machines. VMware has the better performance compared to other virtual software packages.

Context. Virtualization technologies have been extensively used in various cloud platforms. Hardware replacements and maintenance are occasionally required, which leads to business downtime. Live migration is performed to ensure high availability of services, as it is a major aspect. The performance of live migration in virtualization technologies directly impacts the performance of cloud platforms. Hence comparison is performed in two mainstream virtualization technologies, container and hypervisor based virtualization. Objectives. In the present study, the objective is to perform live migration of hypervisor and container based virtualization technologies, Kernel Virtual Machine (KVM) and Linux Containers (LXC) respectively. Measure and compare the downtime, total migration time, CPU utilization and disk utilization of KVM and LXC during live migration. Methods. An initial literature is conducted to get in-depth knowledge about live migration in virtualization technologies. An experiment is conducted to perform live migration in KVM and LXC. The live migration process is performed when 100 % and 66% workloads are being generated to Cassandra present in virtual machine and container. The performance of live migration in KVM and LXC is measured in terms of CPU utilization, disk utilization, total migration time and downtime. Results. Based on the obtained results from the experiment, graphs are plotted for the performance of KVM and LXC during live migration. The results indicated that KVM has better CPU utilization when compared to LXC. However, downtime, total migration time and disk utilization of LXC are relatively better than KVM. From the obtained results, mean and standard deviation are calculated. Box plotting for downtime and total migration time is performed to illustrate difference between KVM and LXC. The measurable difference between KVM and LXC is calculated using Cohen’s d effect size for downtime, total migration time, CPU and disk utilization. Conclusions. The present study concludes that no single hypervisor has better performance when considering all performance metrics. While LXC has better performance when considering downtime, total migration time and disk utilization. However, KVM performs better when CPU usage is considered.

Fingerprint identification is becoming increasingly popular as a means of authentication for handheld devices of different kinds. In order to secure such an authentication solution it is common to use a TEE implementation. This thesis examines the possibility of replacing a TEE with a hypervisor-based solution instead, with the intention of keeping the same security features that a TEE can offer. To carry out the evaluation a suitable method is constructed. This method makes use of fault trees to be able to find possible vulnerabilities in both systems, and these vulnerabilities are then documented. The vulnerabilities of both systems are also compared to each other to identify differences in how they are handled. It is concluded that if the target platform has the ability to implement a TEE solution, it can also implement the same solution using a hypervisor. However, the authors recommend against porting a working TEE solution, as TEEs often offer finished APIs for common operations that would require re-implementation in the examined hypervisor.

This thesis presents an evaluation of the Solaris version of the Xen virtual machine monitor and a comparison of its performance to the performance of Solaris Containers under similar conditions. Xen is a virtual machine monitor, based on the paravirtualization approach, which provides an instruction set different to the native machine environment and therefore requires modifications to the guest operating systems. Solaris Zones is an operating system-level virtualization technology that is part of the Solaris OS. Furthermore, we provide a basic performance evaluation of the security modules for Xen and Zones, known as sHype and Solaris Trusted Extensions, respectively. We evaluate the control domain (know as Domain-0) and the user domain performance as the number of user domains increases. Testing Domain-0 with an increasing number of user domains allows us to evaluate how much overhead virtual operating systems impose in the idle state and how their number influences the overall system performance. Testing one user domain and increasing the number of idle domains allows us to evaluate how the number of domains influences operating system performance. Testing concurrently loaded increasing numbers of user domains we investigate total system efficiency and load balancing dependent on the number of running systems. System performance was limited by CPU, memory, and hard drive characteristics. In the case of CPU-bound tests Xen exhibited performance close to the performance of Zones and to the native Solaris performance, loosing 2-3% due to the virtualization overhead. In case of memory-bound and hard drive-bound tests Xen showed 5 to 10 times worse performance.

High stability of telecommunication services has a positive e ect on customer satisfaction and thus helps to maintain competitiveness of the product in telecommunication market. Since live migration provides a minimal down- time of virtual machines, it is deployed by telecommunication companies to ensure high availability of services and to prevent service interruptions. The main objective of this research is to assess the performance of various hypervisors in terms of live migration and determine which of them best meets the criteria given by a telecommunication company. Response time and CPU utilization of telecommunication services are measured in non- virtualized and virtualized environments to better understand the impacts of virtualization on the services. Two hypervisors, i.e. KVM and XEN, are used to grasp their characteristic behaviour of handling the services. Furthermore, performance of live migration is assessed for both hypervisors using miscellaneous test cases to identify which one has the best overall performance in terms of downtime and total migration time.

Virtualisering av servrar är på frammarsch och ser ut att bli ett mer och mer frekvent inslag i datacenter världen över. När virtualisering ska införas i en organisation eller företag är det därför viktigt att veta om sina behov och därifrån sedan välja en virtualiseringslösning som passar.Denna rapport presenterar en jämförelse av de tre hypervisorer som är ledande på marknaden för virtualisering; VMware ESXi, Citrix XenServer och Microsoft Hyper-V. Den första delen av jämförelsen innefattar granskning av funktionalitet hos hypervisorerna, så som stöd för gästoperativsystem och hårdvarustöd. Den andra delen av jämförelsen mäter prestandan på de tre hypervisorerna på gästoperativsystemen Windows Server 2008, Suse Linux Enterprise Server 11 och Ubuntu Server 8.04 LTS.Prestandatester utförs med SysBench och de komponenter som testas är processor, RAM-minne och hårddisk. Resultaten visar på varierande resultat för de olika hårdvarukomponenterna på de olika systemen som testats.

I takt med att inflödet av studenter minskar ifrån gymnasieskolan är det viktigt för högskolor och universitet att erbjuda en mer flexibel utbildning. I datalogikurser inom nätverks- & systemadministration där studenten ska kunna få praktisk erfarenhet genom laborationer finns det vissa krav på laborationsmiljön om utbildningen skulle erbjudas på distans. Studenten måste då kunna installera nya operativsystem fritt inom kursens ramar i en virtuell miljö. För att denna variant av laborationsmiljö ska vara möjlig att erbjuda, krävs det mjukvara där det för studenterna fritt går att installera operativsystem med stor flexibilitet i en virtuell miljö. En studie behövs som utreder vilken funktionalitet som är relevant och vad som kommer krävas av de mjukvaror som påträffats användbara för laborationsmiljöer inom främst systemadministration. Detta arbete har jämfört funktionalitet och prestanda hos mjukvarorna VMWare vSphere 5 med vCenter Server mot Red Hat Virtualization 3. Resultatet påvisar i stort mycket likvärdig prestanda men VMWare har betydligt mer funktioner som kan vara användbara i miljön. Arbetet har även påvisat att licenskostnaderna blir likvärdiga hos båda mjukvarorna beräknat på en 5-års period.