Ten million and one Penguins
How we are booting millions of Linux kernels with KVM and Lguest
As part of our efforts to study botnets and their effect on Internets, we are booting millions of Linux kernels. To make this scale work, the Linux images must be small (16 MB or less). Observation is also an issue; even tiny information streams, scaled to 10 million, can be overwhelming. In this talk I will discuss our work and the systems we are using for the actual runs.