可信基础设施云设计与实现

Design and Implementation of A Trusted IaaS

云计算正在加速应用到各行各业。然而在云计算模式下用户将数据和应用转移到云服务器或者虚拟机中,可能会受到来自云内部恶意管理员的攻击,加剧了云服务的可信性问题,阻碍了云计算的发展和推广。本文通过引入可信计算技术和第三方验证的方式,设计实现一种新的可信基础实施云模型T-IaaS。最后在Linux上实现原型系统,对其进行定量分析评估。实验结果表明,T-IaaS能够有效的保证基础设施云的可信性,而只引入很小的额外代价。

Cloud computing is rapidly applied to all walks. However, with cloud computing, customers must store their data or deploy applications on the cloud. These resources may be damaged by the malicious administrator of cloud, which aggravates the trustworthiness issue of cloud services and hinders the development and widespread of cloud computing. This paper introduces the Trusted Computing and a Trusted Third Party to verify the trustworthiness of IaaS cloud. This paper implemented a prototype on Linux, and took a quantitative assessment. The experiments demonstrated that T-IaaS brings little extra cost on the performance while guaranteeing trustworthiness.