一种面向云计算环境下虚拟机的威胁建模方法

Approach to threat modeling of virtual machine in cloud computing environment

针对云计算环境中虚拟机平台存在的弱点和漏洞,分析研究了虚拟机可能面临的威胁和攻击,基于STRIDE建模技术构建了云计算环境下虚拟机平台的安全威胁模型。并对威胁发生的可能性和严重程度进行量化,从而进一步评估整个云计算系统面临的安全威胁。

Aiming at the bugs and vulnerabilities of virtual machine platform under the cloud computing environment, the paper studies threats and attacks for virtual machines. And the model of VM security is built based on the STRIDE modeling technology. And then the paper makes a quantitative analysis of the possibility and severity of the threat, and evaluates the security threats that the cloud computing system faced.