基于Intel SGX的Ansible安全增强  

Security Enhancement of Ansible Based on Intel SGX

作　　者：杨骁[1,2] 于佳耕 武延军[1] YANG Xiao YU Jia-Geng WU Yan-Jun(National Engineering Research Center for Fundamental Software, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China University of Chinese Academy of Sciences, Beijing 100049, China)

机构地区：[1]中国科学院软件研究所基础软件国家工程研究中心,北京100190 [2]中国科学院大学,北京100049

出　　处：《计算机系统应用》2017年第10期67-72,共6页Computer Systems & Applications

基　　金：中国科学院先导专项(XDA06010600);国家自然科学基金青年基金(61402451)

摘　　要：Ansible是当今最主流的云平台自动化运维工具之一,通常拥有大量集群的管理员账号信息来批量执行运维任务,这些账号信息一般明文存储在配置文件中.但在云计算环境中这种机制具有较大的安全隐患,因为Ansible的配置信息的机密性和完整性依赖云服务厂商提供的基础软件的安全性.因此,加强Ansible配置信息管理机制的安全性至关重要.本文基于Intel近年推出的安全机制SGX(Software Guard e Xtensions)开发了Ansible的配置管理模块,它可以独立地在可信的执行环境(Trusted Execution Environment,TEE)内管理Ansible的配置信息,从而保证了Ansible配置信息不被外界读取和修改,同时其安全性不再依赖于底层基础软件.实验评估显示,本文方案更加安全可靠,性能的额外开销也在接受范围之内,而且可以进一步扩展成通用的配置管理组件集成到Open Stack等云平台中.As one of the most popular tools for automatic operation and maintenance in cloud platforms, Ansible usually stores a lot of administrator accounts information in a configuration file for batching executions. The configuration file is usually stored in the disk in plain text. However, it is not safe in the cloud because the confidentiality and integrity of configuration of Ansible depend on the security of the underlying software. Therefore, it is crucial to reinforce the security of configuration management mechanism of Ansible. In this paper, we implement a configuration management component for Ansible based on SGX（Software Guard e Xtensions） proposed by Intel in recent years, which can manage the configuration information of Ansible in a trusted execution environment（TEE） independently. With this component,the configuration information cannot be read or written from outside and its security doesn＇t depend on the underlying software. The experiments show that our solution is more reliable, and the extra overhead is also acceptable. It is possible to extend our application to a general component for configuration protection in cloud platforms such as Open Stack.

关 键 词：INTEL SGX 云计算 安全 运维 Ansible 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]