一种基于互信的特权分离虚拟机安全模型研究

Separate privilege virtual machine security model based on mutual trust

虚拟机的安全问题一直是关注的热点。传统管理域Dom0权限过大,使用户的隐私受到威胁;同时,攻击者一旦攻破Dom0,会给所有用户带来威胁。针对这些问题,提出一种基于互信的特权分离(MTSP)安全模型,对Dom0的特权进行分割,将漏洞较多的设备驱动独立出来,形成驱动域;把影响用户隐私的操作分离,为每个用户创建一个DomU管理域;其余的形成Thin Dom0。系统的启动需要用户和虚拟机监控器共同来完成,起到相互制约的作用。结合该模型,给出了原型实现,并且进行了安全性分析及性能测试。结果表明,该模型可以有效地保护用户隐私,分散安全风险,并且隔离故障。

Virtual machine security issues have been the focus of attention. The permissions of traditional management domain Dom0 are too large, so that the user＇ s privacy is threatened. At the same time, once the attacker compromises Dora0, it can threaten all the users. This paper presented a separate privilege virtual machine security model based on mutual trust（ MTSP）. It split Dom0＇ s privileges into three parts ： the device driver, forming the isolated driver domain ; the Operations of the user＇ s privacy, forming a DomU management domain; remaining forming Thin Dom0. It achieved the startup of the system by the VMM and user together restricting each other. Combined with the model, the prototype system was implemented and security analysis and performance testing were done. It can protect the users＇ privacy, apportion the risk and isolate fault.