摘要
随着云计算、虚拟化技术的发展,处于同一物理主机上的虚拟机间的通信也遇到了前所未有的安全问题。以可信计算为基础,通过基于KVM(Kernel-based Virtual Machine)的共享内存机制,采用加密的专属安全可信管道,由可信度量来验证交互双方身份的真实性和可靠性,通过加密内存伪地址,并将可信管道与除交互双方之外的其他虚拟机隔离开来,保证了通信交互过程中信息的可信与安全。并对此方法进行了分析和总结。
With the development of cloud computing, virtualization technology, interaction in virtual machines on the same physical host also encounters hitherto unknown security problem. This paper is based on trusted computing, using shared memory mechanism based on KVM, applies dedicated security trusted pipeline, and uses trusted measurement to verify the authenticity and reliability of two virtual machines. By encrypting memory pseudo address, it isolates other virtual machine except the interaction of the two sides, and guarantees the information trusted and security during the communication process. At last, we analyze and summarize the method.
出处
《计算机安全》
2013年第3期9-12,共4页
Network & Computer Security
关键词
共享内存
可信管道
度量
KVM
Shared Memory
Trusted Pipeline
Measurement： KVM
