虚拟机信任传递树模型的研究

Research of Ttust Transfer Tree Based on Virtual Machine

虚拟机技术如今已在许多领域得到广泛应用,而虚拟机系统面临这越来越多的安全威胁,因此基于虚拟机的安全增强技术是当前安全领域研究的热点问题。可信计算的发展为解决此问题提供了一个新方法。信任传递技术是可信计算的关键技术,通过信任传递保障系统数据的完整性,进而增强系统可信性。本文结合了可信机制与虚拟化技术,研究了虚拟机信任传递树模型,该模型可以保护虚拟机系统组件及应用程序运行,保障平台可信,并且便于信任关系的维护。

Nowadays, the virtual machine technology has been used in many fields. The virtual machine systems are faced with an increasing number of security threats. Therefore, the security enhancement based on virtual machine is a hot point of security research. The development of trust computing offers a new method to solve the problem. Trust transfer is a key technology of trust computing. Trust transfers will ensure the integrity of system data, and then enhance the creditability of system. The paper combines trusted mechanism with virtualization technology and puts forward Trust Transfer Tree of Virtual machine. It can protect the system components and applications, and make sure the platform is trusted. In addition, it is easy to maintain the Trust relationship.