Service Semantic Reconstruction Based On Service Container

The development of Internet of things service requires the security of the Internet of things service.In the virtualization platform,we can run the Internet of things services,and real-time monitor the Internet of things services.We can verify all kinds of events generated during the runtime operation,which can guarantee the security of the Internet of things.Among them,the memory data fetched from service by virtual machine introspection reconstructs the service semantics.According to the service semantics,we can construct memory event.The Internet of things service is deployed in the Java service container,so the semantic reconstruction is based on the Java service container.Based on the existing virtual machine introspection technology,combined with the characteristics of virtualization and Internet of things services,and improving the Java memory analysis technology,this paper proposes a service semantic reconstruction system based on service container.The system obtains memory data based on virtual machine introspection technology,analyzes memory data based on JVM structure,reconstructs function calls and function parameters of Java service,constructs memory events,and provides memory events to runtime verify system of Internet of things.In this paper,service semantic reconstruction system based on service container is studied from three aspects.First,memory acquisition provides memory data for memory analysis,including shared libraries,child threads and stack memory,through virtual machine introspection technology.Secondly,the memory analysis reconstructs the JVM data structure based on the JVM memory structure and the shared library.Based on the JVM data structure,the memory data is obtained from the Java function stack.According to the stack frame structure of the interpreter running,the analysis of memory data reconstructs the function and function parameters of the interpreter running.Based on the stack frame structure of the compiled run and the local code generated by compiler,the function and function parameters of the compiler running are reconstructed by analyzing the memory data.According to the running mode of the front and back frame,the memory data and function call of the next frame are obtained.According to the structure of the Java service container,the parameters of the invoke service are obtained.Finally,based on the function call,function parameters and service parameters,the memory events are constructed and provided to runtime verify system of Internet of things.Based on the requirements analysis,system design and implementation,this paper introduces the functional requirements,design principles and system implementation of service semantic reconstruction system.System testing verifies the availability of the system from two aspects of function and performance.