Generating memory dumps

Abstract

A method for generating a dump comprising data generated by a virtual system in a computing environment is depicted. The method comprises: initiating a dump process for dumping data generated by the virtual system and stored in guest memory; sending a dump request for the data from the virtual machine monitor to the trusted component; in response to receiving the dump request, generating a symmetric dump generating key; reading the data from the guest memory; encrypting the data with the symmetric dump generating key; encrypting the symmetric dump generating key with the public cryptographic key of the client system; providing the encrypted dump data and the encrypted symmetric dump generating key to the virtual machine monitor; generating a dump comprising the encrypted dump data and the encrypted symmetric dump generating key; and providing the dump to the client system.

1 . A computer system for generating a dump including data generated by a virtual system in a computing environment, comprising:
 one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more computer-readable tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, wherein the computer system is capable of performing a method comprising:   initiating a dump process for dumping data being generated by the virtual system and stored in a guest memory;   sending a dump request for the data from a virtual machine monitor to a trusted component;   in response to receiving the dump request, generating a symmetric dump generating key by the trusted component;   after sending the dump request to the trusted component, the trusted component generating a header of the data to be stored, the header comprising the encrypted symmetric dump generating key, a list of the encrypted dump data to be stored, the size of the encrypted data to be stored, the trusted component sending the header to the virtual machine monitor, the virtual machine monitor sending the header to the client, and then the virtual machine monitor sending the data to the client system after the data according to the header is accessible to the virtual machine monitor;   after receiving the dump request from the virtual machine monitor, the trusted component initiating a challenge-response authentication with the client system, wherein the challenge-response authentication uses the private and the public cryptographic key of the client system, and wherein the dump process is performed if the challenge-response authentication is successfully performed;   reading the data from the guest memory by the trusted component;   encrypting the data with the symmetric dump generating key by the trusted component;   encrypting the symmetric dump generating key with a public cryptographic key of the client system by the trusted component;   providing the encrypted dump data and the encrypted symmetric dump generating key to the virtual machine monitor by the trusted component;   generating a dump comprising the encrypted dump data and the encrypted symmetric dump generating key by the virtual machine monitor; and   providing the dump to the client system by the virtual machine monitor.