基于KVM的可信虚拟化平台设计

Design of trusted virtualization platform based on KVM

虚拟化技术作为云计算技术的核心,其安全性日益受到重视。可信计算技术作为一种信息系统安全技术,通过可信赖的方式和方法保证虚拟平台的完整性和可信任性,成为解决虚拟平台安全的重要手段。本文结合KVM架构和虚拟化安全的基本知识,按照分层的思路对虚拟平台进行分层设计,同时为保证不同层之间信息传递的可信度,在先度量后执行的原则,构建不同层传递的信任链模型,最后通过搭建实验平台对上述的方案进行验证,结果表明通过这种逐层验证的方式,可有效反映和保护虚拟化平台的安全,为可信虚拟化平台的构建提供了新的参考借鉴。

Virtualization technology as the core of cloud computing technology,its security has attracted more and more attention.As a kind of information system security technology,trusted computing technology can guarantee the integrity and reliability of the virtual platform through trusted methods and methods,and become an important means to solve the security of the virtual platform.In this paper,combined with the basic knowledge of KVM architecture and virtualization security,in accordance with the hierarchical idea of hierarchical design of the virtual platform,at the same time in order to ensure the information transfer between different layers of the credibility measure after the implementation of the first principle,build trust chain model of different layer transfer,finally through the experimental platform is built to verify the program results this shows that through layer by layer method of verification,can effectively reflect the virtual platform and safety protection,provides a new reference for the construction of trusted virtualization platform.