基于邻接点的VMM动态完整性度量方法  

Method of dynamic integrity measurement for VMM based on adjacency data

作　　者：吴涛[1,2,3] 杨秋松[1,2] 贺也平[1,2] 

机构地区：[1]中国科学院软件研究所基础软件国家工程研究中心,北京100190 [2]中国科学院软件研究所计算机科学国家重点实验室,北京100190 [3]中国科学院大学,北京100049

出　　处：《通信学报》2015年第9期169-180,共12页Journal on Communications

基　　金：国家科技重大专项核高基金资助项目(2012ZX01039-004);国家自然科学青年基金资助项目(61305054)~~

摘　　要：对于虚拟机监控器的动态完整性度量,由于其位于特权层,且复杂多变,一直是领域内的研究难点。提出了一种基于邻接点的动态完整性度量方法,利用邻接点作为度量模块的宿主,通过面向内存页的完整性模型和评估算法,实现了动态完整性度量。实验表明,能够准确地检测到完整性受到破坏,且仅对计算密集型任务造成适中的性能损耗。Due to its high privilege and complicated runtime memory, dynamic integrity measurement for VMM（virtual machine monitor） was always a great difficulty in the current study. An innovative method based on the adjacency data was proposed, which used a neighbor as the host of a measurement module. According to an integrity model in memory page granularity and a new improved measurement algorithm, dynamic integrity measurement for VMM was implemented. Experimental data shows it could detect the integrity broken accurately, only causing a moderate performance loss for computing intensive tasks.

关 键 词：虚拟机监控器 完整性 动态度量 邻接点 度量环 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]