Trusted domain hierarchical model based on noninterference theory  

作　　者：Zhang Lei Chen Xingshu Liu Liang Jin Xin 

机构地区：[1]College of Computer Science,Sichuan University [2]College of Electronics and Information Engineering,Sichuan University

出　　处：《The Journal of China Universities of Posts and Telecommunications》2015年第4期7-16,共10页中国邮电高校学报（英文版）

基　　金：supported by the National Natural Science Foundation of China (61272447);the National Key Technology R&D Program of China (2012BAH18B05);the National New Generation Broadband Wireless Mobile Communication Network Major Project (03 Project) of China (12H1510)

摘　　要：To ensure the integrity and security of cloud tenants＇ workload, and to prevent unexpected interference among tenants, cloud platform must make sure that system behaviors are trusted. By analyzing threats that exist in the cloud platform, a novel trusted domain hierarchical model（TDHM） based on noninterference theory was proposed in this paper to solve these problems. First of all, the abstraction modeling of tenants＇ computing environment and trusted domain（TD） were introduced for designing TDHM with formal methods. Secondly, corresponding constraints for trusted running were given to satisfy security requirements of tenants＇ TD, and security properties of TDHM ware analyzed. After that, trusted behavior of TD was defined based on these properties, and the decision theorem of that was proved. It illustrated that the design and implementation of TD in cloud followed the model with characteristics of trusted behavior. Finally, the implementation of prototype system was introduced based on our previous work, and evaluation results showed that the performance loss was in the acceptable range.To ensure the integrity and security of cloud tenants＇ workload, and to prevent unexpected interference among tenants, cloud platform must make sure that system behaviors are trusted. By analyzing threats that exist in the cloud platform, a novel trusted domain hierarchical model（TDHM） based on noninterference theory was proposed in this paper to solve these problems. First of all, the abstraction modeling of tenants＇ computing environment and trusted domain（TD） were introduced for designing TDHM with formal methods. Secondly, corresponding constraints for trusted running were given to satisfy security requirements of tenants＇ TD, and security properties of TDHM ware analyzed. After that, trusted behavior of TD was defined based on these properties, and the decision theorem of that was proved. It illustrated that the design and implementation of TD in cloud followed the model with characteristics of trusted behavior. Finally, the implementation of prototype system was introduced based on our previous work, and evaluation results showed that the performance loss was in the acceptable range.

关 键 词：trusted domain hierarchical model noninterference theory CLOUD INTEGRITY SECURITY trusted domain 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]