Security monitoring, replication and load balancing require system call
interception. Existing system call interposition frameworks are either slow or
require custom kernel modifications. A virtual machine with a minimal proxy OS
can intercept system calls fast, without any host kernel modifications. I
present ELKVM a framework for fast and secure system call interposition and
resource virtualization that runs Linux binary applications. A minimal ELKVM
monitor runs the SPEC CPU 2006 benchmarks with only 2.2% overhead.