虚拟化安全隔离增强技术研究  

Research of Virtualization Security Isolation Enhancement Technology

作　　者：何重阳 朱仲马 刘晓浩 周英[1] HE Chong-yang;ZHU Zhong-ma;LIU Xiao-hao;ZHOU Ying(The 28th Research Institute of China Electronics Technology Group Corporation,Nanjing 210007,China)

机构地区：[1]中国电子科技集团公司第二十八研究所,江苏南京210007

出　　处：《软件导刊》2018年第11期198-201,共4页Software Guide

摘　　要：为了保证云平台用户资源之间的安全隔离,确保用户虚拟机数据不被非授权访问,基于虚拟化技术原理,结合数据加密混淆、边界检查和残余信息清除技术,设计了虚拟化层CPU、内存、磁盘的安全隔离增强技术方案,为增强虚拟化安全隔离提供了新思路。In order to ensure the security isolation between user resources in cloud platform and ensure that user virtual machine data is not accessed unauthorized,this paper designs and implements the security isolation enhancement technology of CPU,memory and disk in virtualization layer based on the basic principle of virtualization technology and the technology of data encryption obfuscation,boundary checking and residual information clearing.The scheme provides a new idea for virtualization security isolation enhancement.

关 键 词：虚拟化安全 云计算 数据隔离 残余信息清除 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]