Table 3: Five features with the highest Fisher score for each non-CSCa scenario operation type compared to the CSCa scenarios. Note: “:” symbol represent delimiter.

Vs CSCa KVM event sequenceFisher score Non-CSCa Seq. Stat. CSCa Seq. Stat.
Med.MeanSt. dev.Med.MeanSt. dev.

Regular operationMSR_WRITE:kvm_apic:kvm_msr:28.4132133.520.711.34.5
HLT:kvm_eoi:kvm_pv_eoi:kvm_apic_accept_irq: kvm_inj_virq:26.74545.18.6000
HLT:kvm_inj_virq:23.88787.316.1000
MSR_WRITE:kvm_apic:kvm_apic:kvm_apic_ipi: kvm_apic_accept_irq:kvm_msr:19.5109108.221.600.12.8
HLT:kvm_eoi:kvm_pv_eoi:kvm_inj_virq:17.2312305.867.3000

CPU-intensive operationEXCEPTION_NMI:kvm_fpu:9.399.22.200.50.6
EXTERNAL_INTERRUPT:kvm_fpu:4.777.73.121.60.9
CR_ACCESS:kvm_cr:kvm_fpu:0.800.42.432.60.9
PENDING_INTERRUPT:kvm_inj_virq:0.423.26.6167106.584.3
EXTERNAL_INTERRUPT:kvm_apic_accept_irq: kvm_inj_virq:0.3255255.46.194152.882.6

Memory-intensive operationEXCEPTION_NMI:kvm_page_fault:kvm_emulate_insn:434.910041002.115.700.718.3
EXCEPTION_NMI:kvm_page_fault:kvm_inj_exception:87.150584949.2233.605189.8
EXCEPTION_NMI:kvm_page_fault:kvm_apic_accept_irq: kvm_inj_virq:22.92222.24.2000.4
EXCEPTION_NMI:kvm_page_fault:19.351285630.6983.207.9283.8
EXCEPTION_NMI:kvm_page_fault:kvm_emulate_insn: kvm_apic_accept_irq:kvm_inj_virq:9.51111.23.6000