基于体系结构扩展的云计算安全增强研究  

Researches on Architecture Extensions for Cloud Security

作　　者：刘宇涛[1] 夏虞斌[1] 陈海波[1] 

机构地区：[1]上海交通大学并行与分布式系统研究所,上海200240

出　　处：《集成技术》2012年第4期30-33,共4页Journal of Integration Technology

摘　　要：近年来,云计算的安全问题得到了广泛的关注。由于云计算模式的共享、外包和开发的特性,用户并不拥有对计算和数据的完全控制;相反,云平台内部的恶意系统管理员可在用户不知情的情况下窃取或篡改用户的关键数据。研究者们为保护云计算数据的隐私性与完整性,对体系结构进行了扩展,尝试缩小云安全所依赖的软硬件栈。本文阐述了这些研究中采用的主要技术类型,包括内存隔离增强、安全处理器加密等。The security issue of cloud computing has received widely attention in recent years. Due to the sharing, out-sourcing and openness features of cloud computing mode, the end-users don’t gain the complete control over their computing and data. Instead, a malicious system operator can tamper with or steal user’s critical data without user’s awareness. Some researchers tried to protect the privacy and integrity of data in the cloud by extending architecture and reduce the hardware/software stack that cloud security relies on. This paper presents technologies in these researches, including enforcing memory isolation, encryption by secure processor, et al.

关 键 词：云计算安全 虚拟化安全 体系结构扩展 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]