一种基于虚拟机的驱动程序加固技术  

Research of Device Driver Hardening Based on the Virtual Machine Technology

作　　者：吴庆波[1] 颜跃进[1] 张亚军[1] 吴泉源[1] 

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2010年第11期124-127,140,共5页Computer Engineering & Science

基　　金：国家863计划资助项目(2007AA01Z177);国家自然科学基金重点项目(90718040)

摘　　要：近年来设备驱动程序可靠性技术已成为操作系统领域的研究热点。本文首先分析了驱动程序可靠性研究现状,介绍了虚拟机监控器技术;然后结合虚拟机技术,提出了一个新的驱动加固框架VHarden,重点研究了驱动域之间的数据传输和隔离保护机制,并基于开源的Xen虚拟机监控器和Linux操作系统,设计和实现了该原型系统;最后采用基于软件的故障注入工具对该原型系统进行了评测。测试结果表明,VHarden驱动加固结构可有效提高Linux操作系统的可用性。To improve the reliability and robustness of commodity operating systems, it is very important to improve the reliability of the device drivers in operating systems. Currently, the research of improving the reliability of device drivers focuses on the efficient isolation of the device driver and the operating system kernel. We first design a new device driver framework VHarden based on the virtual machine technology, and then focus on a data transfer mechanism and the domain protection techniques We im plement the VHarden prototype using Xen and Linux Finally, we use fault injection tools to test it. The results show that the VHarden framework is useful in improving the reliability of commodity operating systems.

关 键 词：操作系统 驱动加固 故障隔离 故障注入 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]