基于动态信任根的虚拟机监控器动态完整性度量架构  

Dynamic integrity measurement architecture for virtual machine monitor based on dynamic root of trust

作　　者：王晓龙[1,2] 丁丽萍[1] 廖晓锋[3] 金波[4] 林渝淇[1,2] 王秀利[5] 王永吉[1] 

机构地区：[1]中国科学院软件研究所基础软件国家工程研究中心,北京100190 [2]中国科学院大学,北京100190 [3]南昌大学信息工程学院,南昌330031 [4]公安部第三研究所信息网络安全重点实验室,上海201204 [5]中央财经大学信息学院,北京100081

出　　处：《计算机应用》2014年第A02期194-199,共6页journal of Computer Applications

基　　金：信息网络安全公安部重点实验室开放基金资助课题(C12610);江西省教育厅青年科学基金资助项目(GJJ13013)

摘　　要：现有虚拟机监控器(VMM)动态完整性度量架构在度量信任根的安全性方面存在问题,同时没有综合考虑VMM中需要进行完整性度量的数据,为此提出了一种基于动态信任根的VMM动态完整性度量架构。采用基于AMD的安全虚拟机技术构建动态信任根,可以实现对度量程序加载执行前的完整性度量;同时构建封闭独立的执行环境,从而可以有效地解决度量信任根的问题。通过分析VMM运行时的内存状态,对所有需要进行完整性保护的静态持久化数据进行完整性度量,从而可以保证度量内容的完备性。同时给出该架构在Xen上的实现。实验结果表明,该架构可以有效地解决度量信任根的问题,并且对度量内容具有良好的扩展性,从而保证度量内容的完备性;此外,该度量架构与现有架构Hyper Check-SMM相比有23.3%的性能提升。There are problems in the existing Virtual Machine Monitor（ VMM） dynamic integrity measurement architecture, such as the security of the root of trust for measurement, and not considering the data that needs to be used in the VMM for integrity measurement. A new architecture of dynamic integrity measurement architecture for VMM based on dynamic root of trust was presented in this paper. By using secure virtual machine to construct the dynamic root of trust for measurement based on AMD, it could realize the integrity measurement program before execution, and built a closed independent execution environment, which could effectively solve the problem of the root of trust for measurement. By analyzing the memory state of the runtime VMM, it could measure the integrity of all the static persistent data that needed to be protected for guaranteezing the completeness of measurement content. The architecture was implemented on Xen. The experimental results show that the architecture can effectively solve the problem of root of trust for measurement, while ensuring the extensibility of the measurement content to guarantee its completeness, in addition, the measurement architecture can achieve 23. 3%performance boost compared with Hyper Check-SMM.

关 键 词：虚拟机监控器 完整性保护 可信计算 动态信任根 动态完整性度量 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]