基于三位一体协同的虚拟机隔离保护方案

Virtual Machine Isolation Protection Scheme Based on Trinity Collaboration

针对基于虚拟机(virtual machine, VM)保护框架的代码隔离技术中所存在的单一隔离环境安全问题,提出一种三位一体协同虚拟机保护方案。基于Mealy自动机对核心代码和关键数据进行混淆转换,采用虚拟机框架进行保护,将关键数据和核心代码迁移至第三方安全环境,最后结合篡改恢复和自毁技术构建本地软硬件和远程云端三位一体协同保护方案,构建了模拟系统,并基于测试保护程序验证了该保护方案的有效性和可行性。

To address the security problem of single isolated environment in code isolation technology based on virtual machine(VM) protection framework, a trinity collaborative VM protection scheme was proposed. Firstly, the core code and critical data were obfuscated and transformed based on Mealy automata, and the virtual machine framework was used for protection. After that, the key data and core code were migrated to the third-party environment, and the tamper recovery and self-destruction techniques were combined to build the three-in-one collaborative protection scheme based on local hardware, software and remote cloud. Finally a simulation system was built to verify the effectiveness and feasibility of the protection scheme based on the test programs.