A Virtual Machine Replay System Based on Para-virtualized Xen

Operating system debugging and system security are two important issues which are attracted more and more attentions. However, traditional solutions of software debugging can not make an integrated replay towards the status of operating system. Moreover, most intrusion detection methods all depend on the operating system excessively, but operating system ex-poses so many interfaces to outside that it can not ensure its own security and is attacked vulnerably. Therefore, a para-virtualized model based full system replay is developed in this paper. According to the para-virtualized device model pro-vided by Xen, this system captures the non-deterministic events in the target operating system through a real-time monitoring module, and saves the data and time point of these events occurrence as log file elaborately. Using these data, we can make a full-system replay to the target operating system accurately. Compared with the previous replay systems, this system is more efficient and has two prominent advantages: no need to modify the target operating system, and no need to reboot the target operating system before executing replay.