基于安全等级的虚拟机动态迁移方法  

Research on dynamic migration of virtual machine based on security level

作　　者：赵硕[1] 季新生[1] 毛宇星[2] 程国振[1] 扈红超[1] ZHAO Shuo;JI Xin-sheng;MAO Yu-xing;CHENG Guo-zhen;HU Hong-chao(National Digital Switching System Engineering and Technological Research Center, Zhengzhou 450002, China;Command Information System Institute, PLA University of Science and Technology, Nanjing 210007, China)

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002 [2]解放军理工大学指挥信息系统学院,江苏南京210007

出　　处：《通信学报》2017年第7期165-174,共10页Journal on Communications

基　　金：国家自然科学基金创新研究群体基金资助项目(No.61521003);国家自然科学基金资助项目(No.61602509);国家重点研发计划基金资助项目(No.2016YFB0800100;No.2016YFB0800101)~~

摘　　要：侧信道攻击是当前云计算与数据中心环境下多租户间信息泄露的主要途径,现有基于虚拟机动态迁移的防御方法存在迁移算法收敛时间长,开销大的问题,为此,提出一种基于安全等级的虚拟机动态迁移方法。首先,对虚拟机进行安全等级分类,减少虚拟机动态迁移的数量;然后采用相应的虚拟机映射策略,降低虚拟机迁移的频率。实验表明,与现有基于虚拟机动态迁移的防御方法相比,该方法能够降低虚拟机迁移算法的收敛时间和迁移开销。Side-channel attacks were the main ways of multi-tenant information leakage in the cloud computing and data center environments.The existing defense approaches based on dynamic migration of virtual machine have long convergence time of migration algorithm and high migration cost.Hence,a dynamic migration of virtual machine based on security level was proposed.Firstly,security level classification of virtual machines was used to reduce the number of migrating virtual machines.Then the corresponding virtual machines embedding strategy was used to reduce the frequency of virtual machines migration.Simulation experiments demonstrate that the proposed approach can reduce convergence time of migration algorithm and migration cost.

关 键 词：侧信道攻击 虚拟机迁移 安全等级 迁移算法 迁移开销 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]