HyperSpector:基于UEFI的VMM动态可信监控基的设计与实现  

HyperSpector:VMM dynamic trusted monitor based on UEFI

作　　者：王锴[1,2] 李志华[1,2] 黄凡[1,2] 严飞[1,2] WANG Kai LI Zhi-hua HUANG Fan YAN Fei(Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education, Wuhan 430072, China School of Computer, Wuhan University, Wuhan 430072, China)

机构地区：[1]空天信息安全与可信计算教育部重点实验室,湖北武汉430072 [2]武汉大学计算机学院,湖北武汉430072

出　　处：《网络与信息安全学报》2016年第12期47-55,共9页Chinese Journal of Network and Information Security

基　　金：国家自然科学基金资助项目(No.61003268;No.61272452);国家重点基础研究发展计划("973"计划)基金资助项目(No.2014CB340601)~~

摘　　要：随着计算机技术的高速发展,云计算这一计算模式得到迅速推广。尽管可通过VMM来对云服务安全状态进行监控与安全增强,但VMM自身的安全性往往是安全的前提。为了增强VMM的安全性,提出一种基于UEFI的VMM动态可信监控基的设计与实现方法,通过UEFI的固件运行特性,在VMM下增加一层安全监控层,实现在不增加新硬件成本的前提下对VMM的透明监测。实验表明,所提出的监控方案是安全有效的。With the rapid innovation of computer technology, cloud computing model expands. VMM was introduced to enhance the cloud safety and enhance the cloud safety. The safety of VMM itself, however, is the prerequisite of the safety of the cloud service. A method of VMM dynamic trusted monitor based on UEFI was proposed on the purpose of enhancing the safety of VMM. The monitor of VMM was realized by adding a monitor layer beneath it, which needed no more newly hardware cost. Experiment results show that the solution is efficient.

关 键 词：云计算 可信计算 动态可信 统一的可扩展固件接口 虚拟机监控器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]