基于虚拟机的OpenSSH秘钥数据隔离方法

Private data isolation for OpenSSH based on virtual machines

OpenSSH密钥数据保存在文件系统中,在主机遭受攻击后容易暴露,需要对这些重要数据进行保护。为此提出使用虚拟机将密钥数据保存到隔离空间,并提供安全访问方法。这种方式使得即使主机在被攻陷的时候,攻击人员仍然无法获得相应的秘钥信息。使用虚拟机的方式提供了一个完全隔离的安全空间,对OpenSSH秘钥数据起到了保护作用。

OpenSSH stores keys in the file system. The keys are easy to be exposed while the host has been invaded by illegal users. Methods are needed to protect these important data. For such purpose, virtual machine protection was proposed to provide a separate space for storing the important data as well as secure accessing interfaces. By using virtual machine even under the situation that the host is compromised, the important data can still be kept safe. Thus, the safe and separate space provided by virtual machine can protect the keys of OpenSSH securely.