虚拟化安全综述

Overeview Virtualized Security

虚拟化技术由于其在效率、成本、扩展性等方面的诸多优势,近年来在云计算领域得到了广泛的应用。但虚拟化在安全方面带来了一些负面的影响,包括:虚拟化增加了技术层,必须有附加的安全控制,从而增加了安全管理负担;虚拟化环境动态性很强,使得创建和维护必要的安全边界变得更加复杂;在出现安全漏洞时,许多虚拟系统集中到单一的物理计算机上的架构可能造成较大的影响等。从技术、管理和运维的角度,对虚拟化安全进行了论述。

Because of its advantages in efficiency,cost,scalability,virtualization technology is widely applied in recent years in the field of cloud computing. However,virtualization also brings some negative effects in terms of security,including that virtualization adds the technical layer,and there must be additional security controls,thus raising the burden of security management; Virtualized environment is highly dynamic,thus makes creation and maintenance of the necessary security border more complex. When security vulnerabilities occur,many virtual systems concentrated on a single physical computer architecture might cause fairly great impact. This article,from the aspects of technology,management,operation and maintenance,discusses the virtualized security.