The idea is to determine a good architecture for tapping into
disk access in Xen. Specifically, imagine a monitor that sits
between the backend disk vbd driver and the actual disk driver.
This monitor would see raw disk reads, writes, etc. The project
would be to start with this data flow and build a useful, generic
data abstraction on top of it. Ideally, the setup would be
flexible enough to work with various filesystems, disk drivers,
etc. This would obviously fit into the domain of disk-based IDS
(see some related URL references below). But it could be used for
other monitoring purposes as well (e.g., system management).
Criteria for a good architecture would include performance, flexibility
(as defined above), and code simplicity.
http://www.cs.wisc.edu/adsl/Publications/sds-per06.html
http://www.pdl.cmu.edu/PDL-FTP/Secure/CMU-PDL-03-106_abs.html
Contact:
bryan@thepaynes.cc