客户虚拟机磁盘数据安全性的保护方法  

PROTECTION APPROACH FOR SECURITY OF DISK DATA IN GUEST VIRTUAL MACHINES

作　　者：刘斐 任兰芳 柏洪涛 

机构地区：[1]中国移动通信有限公司,北京100000

出　　处：《计算机应用与软件》2015年第2期295-299,320,共6页Computer Applications and Software

基　　金：2012国家科技重大专项(2012ZX03002002)

摘　　要：虚拟环境中,客户虚拟机的磁盘数据的访问由特权虚拟机来完成,这使得恶意的黑客或者系统管理员可以通过控制特权虚拟机随意地访问和修改客户虚拟机的磁盘数据,对客户虚拟机的磁盘数据安全性带来了极大的威胁。通过虚拟机监控器对客户虚拟机的磁盘数据使用数据加密和哈希校验的方法,可以有效地保护客户虚拟机的磁盘数据在访问过程中的隐私性和完整性,从而确保虚拟环境中,客户虚拟机磁盘数据的安全。该方法可以有效增强Xen虚拟架构下客户虚拟机磁盘数据的安全性。实验结果显示该方法真实有效且性能开销很小,是一种有效地保护客户虚拟机磁盘数据的安全性的方法。In virtual environments, the access of disk data in guest virtual machines （VMs） is achieved by the privileged VM. However, this leads to malicious administrators or hackers free to access and modify disk I/O data of a guest VM by controlling the privileged VM, thus brings great threat to the security of disk data in guest VMs. It can effectively protect the privacy and integrity of disk I/O data in guest VMs during accessing process by applying data encryption and Hash validation on the disk data of guest YMs through virtual machine monitor, thereby ensures the security of disk data in guest VMs in virtual environments. With this method, the security of disk I/O data in guest VMs under Xen virtual environment can be greatly enhanced. Experimental results show that this method is valid and effective with minimal performance overhead, it is an effectual method to protect the security of disk I/0 data in guest VMs.

关 键 词：虚拟化 磁盘数据安全 加密 哈希校验 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]