레비의 가상화와 원효의 화쟁사상

이효걸(Lee, Hyo-gul) 불교학연구회 2010 불교학연구 Vol.27 No.-

디지털 기술의 발전으로 우리는 가상현실을 일상적으로 경험한다. 가상현실이 넘치는 사회는 현실을 기반으로 형성된 근대적 자아 정체성을 해체시킨다. 그러므로 가상현실을 과학기술적 관점에서만 볼 것이 아니라 인간학적 관점에서 보아야 한다. 가상현실을 인간학적 관점에서 탐구할 때, 가상현실에서 중요한 것은 인간정신의 '가상화'문제다. 가상현실이라 할 때의 '가상'이란 말은 플라톤의 '시뮬라크라' 개념과 비슷하다. 그렇지만 플라톤의 시뮬라크라 개념은 복제물로서 무가치한 것이었으나, 질 들뢰즈(Gilles Deleuze:1925-1995)는 이것을 '원형을 뛰어넘어 자신을 창조하는 역동성'으로 새롭게 해석한다. 들뢰즈의 이런 생각을 이어받은 피에르 레비(Pierre Levy:1956-)는 '가상(virtual)'에서 중요한 것은 현실에서 가상으로 향하는 이행이며 개체를 상승시키는 '가상화(virtualization)'라고 말한다. 가상화가 시공간적 무대에 고착되어 있는 현실화의 위험성을 고발하고 그 제약을 뛰어넘을 수 있는 탈출로를 제공하고 있는 점은 의미가 있다. 그러나 가상화를 통해 우리는 과연 자신을 창조하며 자족적 존재감을 맛볼 수 있는가? 가상화의 일종인 스토리텔링은 대리충족감을 주고 있으므로 레비의 가상화 개념에 자족적 존재감이 있는 것 같아 보인다. 그렇지만 스토리텔링의 충족감은 곧 '카타르시스'를 말하는 것으로, 이야기를 통한 억눌린 감정의 대리만족이며 심리적 보상을 말한다. 그것은 '하고자 한 바의 구현'으로서 자기충족이라 할 수 없다. 왜냐하면 가상화의 자기충족은 외부세계에서 그 구현을 꿈꾸기 때문이다. 『대승기신론』의 관점에서 레비의 가상화를 본다면, 가상화의 의식활동은 의식의 자기분열 과정이므로 거기에 자족감이나 안정감이 있을 수 없음을 알 수 있다. 또한 레비의 가상화는 『대승기신론』의 一心二門 가운데 생멸문에 해당되는 것으로 보인다. 그러나 레비의 가상화가 생멸문과 같지 않는 것은 진여문을 설정하지 않는 점에 있다. 『대승기신론』의 생멸문은 진여문의 자기전개에 지나지 않는다. 더구나 『대승기신론』은 진여문과 생멸문이 다르지 않다는 사실을 아는 깨달음을 얻는다면, 생멸문에서도 자기충족적 존재감을 맛볼 수 있다고 한다. 한 걸음 더 나아가 원효의 화쟁사상은 깨달음을 전제로 진여문과 생멸문을 두 축으로 하여 의식활동을 자유롭게 왕래하는 데서 자족적 존재감(自在)을 맛볼 수 있다고 한다. 이러한 측면에서 레비의 가상화를 보면, 레비가 말하는 인간의 자기 창조는 한계가 엿보인다. 거기에는 자유로운 생각의 설정과 그 내재적 실현이 있다고 볼 수 없기 때문이다. 원효의 화쟁사상이 가상현실이 넘실거리는 우리사회에서 더욱 빛을 발하는 까닭이 여기에 있다. According to the benefit of digital-technology development, we experience virtual reality everyday . However, a society filled with overflowing virtuality is dissolving our modern Self-Identity molded on the base of reality. Therefore, we have to approach the virtual reality from a humanics point of view as well as one of technology. When we study virtual reality from a humanics point of view, what matters the most in the virtual reality is the 'Virtualization' of the human mind. The meaning 'Virtual' in virtual reality is similar to the concept of 'simulacra' suggested by Platon. The concept of 'simulacra' of Platon refers to 'the worthlessness' because it is nothing but a copy of reality; however, Gilles Deleuze(1925-1995) has made a new interpretation of 'dynamism creating self-identity beyond originality'. Pierre Levy (1956-) succeeded the ideas of Deleuze and insists that the concept of 'Virtualization' is the most important thing in the concept of 'Virtuality'. It makes sense that we can predict the risk of 'Actualization' bounded to time-space stage unmovable and find the way to escape from the restriction of 'Virtualization'. Nevertheless, can we create ours elves and make our presence felt with self-satisfaction by virtualization? Story-telling(a kind of virtualization) gives us the sense of substitutive satisfaction and Levy's concept of Virtualization seems to have the sense of self-satisfaction. In spite of that, as we can say that to experience the sense of satisfaction by story-telling is a kind of catharsis, we come to know that satis fact ion by story-telling is the substitutive satisfaction of depression or psychological compensation. Therefore, we cannot say it is the satisfaction previously mentioned because it is not the realization one wants to become true. The basic reason why the self-satisfaction by virtualization cannot be fulfill ed is located in realizing one's dream in the outside world If we examine Levy's concept of Virtualization from the standpoint of The Awakening of Faith(『大乘起信論』), we find there is no self-satisfaction or stability because the activity of consciousness is the process of self-division. In addition, we can find that Levy's concept of Virtualization seems to belong to The Mind in Terms of Phenomena(生滅問) of One Mind and Its Two Aspects(一心二問); however, we can come to know the difference between the two in that there is no set up of The Mind in Terms of the Absolute(眞如問). The Mind in Terms of Phenomena of The Awakening of Faith is nothing but another development of The Mind in Terms of the Absolute. Furthermore, according to The Awakening of Faith, "If we can get the enlightenment that The Mind in Terms of Phenomena is identical to The Mind in Terms of the Absolute, we can feel the sense of Human Being with self-satisfaction." In addition, according to Wonhyo's thoughts on Harmonization, it is said that we can experience self-satisfaction as Human Being in consciousness-activity of freely coming and going between The Mind in Terms of Phenomena and The Mind in Terms of the Absolute on the assumption that we have the enlightenment of One Mind. Considering Levy's concept of Virtualization from this point of view, the limit of the creating self-identity mentioned by Levy is revealed to us because there is no free setting of one's own thinking and its immanent realization. This is the reason why Wonhyo's thought of Harmonization is glowing still more in our society of overflowing virtual reality.

A Strategy for Adopting Server Virtualization in the Public Sector: NIPA Computer Center

Song, Jong-Cheol,Ryu, Jee-Woong,Moon, Byung-Joo,Jung, Hoe-Kyung The Korea Institute of Information and Commucation 2012 Journal of information and communication convergen Vol.10 No.1

Many public organizations have been adopting and operating various servers. These servers run on Windows, Unix, and Linux operating systems that generally use less than 10% of their capacity. For migrating a public organization to cloud computing, we must first virtualize the server environment. This article proposes a strategy for server virtualization that the National IT Industry Promotion Agency (NIPA) has done and describes the effects of a public organization migrating to cloud computing. The NIPA Computer Center planned an effective virtualization migration on various servers. This project of virtualization migration was conducted with the existing policy of separate x86 servers and Unix servers. There are three popular approaches to server virtualization: a virtual machine model, a paravirtual machine model, and virtualization at the operating system layer. We selected a VMware solution that uses the virtual machine model. We selected servers for virtualization in the following manner. Servers were chosen that had the highest rate of service usage and CPU usage and had been operating for five years or more. However, we excluded servers that require 80% or greater rates of CPU usage. After adopting the server virtualization technique, we consolidated 32 servers into 3 servers. Virtualization is a technology that can provide benefits in these areas: server consolidation and optimization, infrastructure cost reduction and improved operational flexibility, and implementation of a dual computing environment.

Desktop Computer Virtualization for Improvement Security, Power Consumption and Cost by SBC(Server Based Computer)

Lee Yong Hui,Kim Hwan Seok,Kim Baek Ki 보안공학연구지원센터 2015 International Journal of Security and Its Applicat Vol.9 No.5

It is possible for virtualization of desktop to dramatically reduce maintenance costs and improve the security using various virtualization techniques rather than previous desktop environments. Also, with blocking beforehand the information leakage caused by data centralization, it is easy to manage the information security. This desktop virtualization provides creation and duplication of data and standardized desktop environments using easy and fast virtualization works. So, it is possible to improve efficiency, stability, and fusibility of virtualization. In this paper, with the desktop virtualization, the power saving effects are obtained from 65,750(kW) to 7,300(kW) , which is from 480(w) to 50 (w) for using one desktop for 8 hours per a day. In addition, the 62 desktops and 62 monitors are combined to one operational server with 62 thin clients. As a result of this, the security is improved greatly by data centralization, which the user can access the main server as a thin client with given space.

Survey on Network Virtualization Using OpenFlow: Taxonomy, Opportunities, and Open Issues

( Ahmed Abdelaziz ),( Tan Fong Ang ),( Mehdi Sookhak ),( Suleman Khan ),( Athanasios Vasilakos ),( Chee Sun Liew ),( Adnan Akhunzada ) 한국인터넷정보학회 2016 KSII Transactions on Internet and Information Syst Vol.10 No.10

The popularity of network virtualization has recently regained considerable momentum because of the emergence of OpenFlow technology. It is essentially decouples a data plane from a control plane and promotes hardware programmability. Subsequently, OpenFlow facilitates the implementation of network virtualization. This study aims to provide an overview of different approaches to create a virtual network using OpenFlow technology. The paper also presents the OpenFlow components to compare conventional network architecture with OpenFlow network architecture, particularly in terms of the virtualization. A thematic OpenFlow network virtualization taxonomy is devised to categorize network virtualization approaches. Several testbeds that support OpenFlow network virtualization are discussed with case studies to show the capabilities of OpenFlow virtualization. Moreover, the advantages of popular OpenFlow controllers that are designed to enhance network virtualization is compared and analyzed. Finally, we present key research challenges that mainly focus on security, scalability, reliability, isolation, and monitoring in the OpenFlow virtual environment. Numerous potential directions to tackle the problems related to OpenFlow network virtualization are likewise discussed

Design of an Efficient Method for Identifying Virtual Machines Compatible with Service Chain in a Virtual Network Environment

Hyeonseok Oh,Daeun Yu,Yoon-Ho Choi,Namgi Kim 보안공학연구지원센터 2014 International Journal of Multimedia and Ubiquitous Vol.9 No.11

With advancements in network technologies, network virtualization has been proposed to efficiently provide a large number of services and flexible management by utilizing limited resources over existing networks as much as possible. Network virtualization has been proposed as a new paradigm for networks, as it simplifies complicated network configurations for convenient maintenance through the maximum utilization of limited network resources. However, problems have arisen due to network virtualization, such as how to assign real network components that are compatible with virtual network components over a large number of virtual machines existing in a network. In particular, the service-chaining concept—where a network flow only passes through needed services—has been newly introduced by combining the recently highlighted Software-Defined Network with a virtualization concept called Network Function Virtualization. As a result, studies on which virtual machines are selected and how to connect them have increased ever more. Accordingly, this paper aims to identify virtual machines that are compatible with service chaining in a virtual network environment where virtual machines are dispersed, and it proposes a method of how to create a path by connecting virtual machines.

A Technical Trend and Prospect of I/O Virtualization

Yongkeun Kim(김용근) 대한전기학회 2019 전기학회논문지 P Vol.68 No.3

Virtualization technology has been widely used and it is a broad topic. As the universe of I/O devices is large and diverse, this article focuses on I/O virtualization. The I/O virtualization gives many advantages, such as better I/O device utilization, seamless portability of virtual machines across servers, live migration, dynamic device management while virtual machines are running, virtual views over multiple I/O devices, additional new feature support not provided by hardware, etc. There are many techniques developed so far, which are software-based, hardware-based and hybrid one. This article reviews the benefits and characteristics of the I/O virtualization, current available technologies in software and hardware perspective, then, checks their status and trends.

Virtualization Security : Analysis and Open Challenges

Muhammad Arif,Haroon Shakeel 보안공학연구지원센터 2015 International Journal of Hybrid Information Techno Vol.8 No.2

Virtualization is a term that refers to the abstraction of computer resources. Virtualization has many applications within any organization. This makes possible virtual storage network and utilizing hardware resources efficiently. Virtualization also makes the foundations of cloud computing services, allowing users to use the hardware as an on-demand service. With all such advantages, there are also some security and privacy issues for utilizing any form of virtualization. The aim of this survey is to highlight such threats and techniques to solve these issues.

가상화된 SDN에서 효과적인 자원 활용을 위한 LISP 기반 IP 주소 가상화 기법

고영근(Youngkeun Go),양경식(Gyeongsik Yang),유봉열(Bong-yeol Yu),유혁(Chuck Yoo) Korean Institute of Information Scientists and Eng 2016 정보과학회논문지 Vol.43 No.12

Network virtualization is a technique that abstracts the physical network to provide multiple virtual networks to users. Virtualized network has the advantage to offer flexible services and improve resource utilization. In SDN architecture, network hypervisor serves to virtualize the network through address virtualization, topology virtualization and policy virtualization. Among them, address virtualization refers to the technique that provides an independent address space for each virtual network. Previous work divided the physical address space, and assigned an individual division to each virtual network. Each virtual address is then mapped one-to-one to a physical address. However, this approach requires a lot of flow entries, thus making it disadvantageous. Since SDN switches use TCAM (Ternary Contents Addressable Memory) for the flow table, it is very important to reduce the number of flow entries in the aspect of cost and scalability. In this paper, we propose a LISP based address virtualization, which separates address spaces for the physical and virtual addresses and transmits packet through tunneling, in order to resolve the limitation of the previous studies. By implementing a prototype, we show that the proposed scheme provides better scalability.

IOMMU Para-Virtualization for Efficient and Secure DMA in Virtual Machines

( Hongwei Tang ),( Qiang Li ),( Shengzhong Feng ),( Xiaofang Zhao ),( Yan Jin ) 한국인터넷정보학회 2016 KSII Transactions on Internet and Information Syst Vol.10 No.12

IOMMU is a hardware unit that is indispensable for DMA. Besides address translation and remapping, it also provides I/O virtual address space isolation among devices and memory access control on DMA transactions. However, currently commodity virtualization platforms lack of IOMMU virtualization, so that the virtual machines are vulnerable to DMA security threats. Previous works focus only on DMA security problem of directly assigned devices. Moreover, these solutions either introduce significant overhead or require modifications on the guest OS to optimize performance, and none can achieve high I/O efficiency and good compatibility with the guest OS simultaneously, which are both necessary for production environments. However, for simulated virtual devices the DMA security problem also exists, and previous works cannot solve this problem. The reason behind that is IOMMU circuits on the host do not work for this kind of devices as DMA operations of which are simulated by memory copy of CPU. Motivated by the above observations, we propose an IOMMU para-virtualization solution called PVIOMMU, which provides general functionalities especially DMA security guarantees for both directly assigned devices and simulated devices. The prototype of PVIOMMU is implemented in Qemu/KVM based on the virtio framework and can be dynamically loaded into guest kernel as a module, As a result, modifying and rebuilding guest kernel are not required. In addition, the device model of Qemu is revised to implement DMA access control by separating the device simulator from the address space of the guest virtual machine. Experimental evaluations on three kinds of network devices including Intel I210 (1Gbps), simulated E1000 (1Gbps) and IB ConnectX-3 (40Gbps) show that, PVIOMMU introduces little overhead on DMA transactions, and in general the network I/O performance is close to that in the native KVM implementation without IOMMU virtualization.

가상 장치의 성능 향상을 위한 커널 레벨 장치 가상화 기술

김정한(Junghan Kim),이동우(Dongwoo Lee),민창우(Changwoo Min),엄영익(Young Ik Eom) 한국정보과학회 2013 정보과학회 컴퓨팅의 실제 논문지 Vol.19 No.2

가상화 기술은 하드웨어와 소프트웨어의 발전과 함께 다양한 분야에 적용되어 컴퓨팅 환경의 자원 활용성을 높이고 있다. 이와 같이 가상화 환경이 널리 사용됨에 따라서 프로세서/메모리/장치 가상화를 효과적으로 지원하기 위한 관련 연구가 진행되고 있다. 그중에서도 장치 가상화는 빈번한 입출력 워크로드를 갖는 대규모 가상 머신 환경을 지원하기 위한 핵심 기술로써 주목받고 있다. 이를 위해 기존의 연구에서 다양한 모델이 제안되었으나 장치 접근 요청에서 발생하는 모드 전환 비용에 대한 해결 방법을 제시하지 못하고 있다. 이에 본 논문에서는 폴링 기반의 커널 레벨 장치 가상화 기술을 제안하여 모드 전환 비용을 제거하였다. 또한, 이에 대한 프토토타입을 구현하여 높은 입출력 워크로드에서 본 폴링 기반장치 가상화 기술의 성능 개선을 확인하였다. Virtualization technologies have been applied in various area, and they improve the utilization of the computing resources. Accordingly, it is important to study on processor, memory, and device virtualization. Above all, the device virtualization has been attracting a core technology to support large scale virtual machines in complex I/O workloads. Even though various models for device virtualization have been proposed, there is no answer to handle mode transition cost. In this paper, we propose a I/O virtualization technology, which is the in-kernel device virtualization technology, to accelerate virtual devices in a virtual machine based on a polling scheme. And, we show experimental results on the complex storage and network workloads using our prototype implementation based on the polling scheme.