虚拟机动态迁移中的安全分析

Security Analysis in Virtual Machine Live Migration

网络计算与"云计算"兴起过程中,其基础技术虚拟化技术发展迅速。计算机虚拟化的动态迁移,是重要的虚拟化应用功能。基础的动态迁移协议较简单,存在安全可信的隐患。在Xen虚拟化的平台下,测试了现有虚拟化动态迁移组件的使用对动态迁移本身的性能影响,提供了基于网络嗅探及地址解析协议(address resolution protocol,ARP)欺骗技术的攻击方案,验证了其安全防护能力的不足,提出了解决方案。

During the development of network computing and cloud computing,virtualization grows up quickly as the base technology.Virtualization live migration is an important feature for applications based on virtualization.Basic live migration protocol is too simple,and security hazard exists.Based on Xen virtualization platform,the performance of existed security solutions and the influence to live migration of these solutions are tested.The weakness of existed solutions is shown by attack based on sniffer and address resolution protocol（ARP） spoofing.The idea of solving the new problem is given.