Pollux VMM: A Virtual Machine Monitor for Executing Untrusted Code

In this paper, we proposed a Type II virtual machine monitor (VMM) named Pollux VMM for realizing an untrusted code container. We ported QEMU, an open source computer system emulator, to a native compiler for Windows platforms, and implement Pollux VMM based on the ported dynamic instruction translation engine of QEMU. Pollux VMM is versatile enough just like other virtual machines and isolation solutions. Our functional evaluation illustrates the effectiveness of Pollux VMM, while the performance evaluation shows that the ported dynamic instruction translation of Pollux VMM is more efficient than QEMU's by 11.7% on average. In addition, Pollux VMM comes very close to native performance, reaching 98.25% on average.