基于三位一体协同的虚拟机隔离保护方案  

Virtual Machine Isolation Protection Scheme Based on Trinity Collaboration

作　　者：谢鑫 梁卫芳 张钰莎 XIE Xin;LIANG Weifang;ZHANG Yusha(School of Computer Science and Engineering,Hunan Institute of Information Technology,Changsha 410151,China)

机构地区：[1]湖南信息学院计算机科学与工程学院,湖南长沙410151

出　　处：《贵州大学学报（自然科学版）》2023年第1期62-69,共8页Journal of Guizhou University:Natural Sciences

基　　金：湖南省教育厅科学研究重点资助项目(18A512);湖南省自然科学基金资助项目(2019JJ50413,2020JJ5397)。

摘　　要：针对基于虚拟机(virtual machine, VM)保护框架的代码隔离技术中所存在的单一隔离环境安全问题,提出一种三位一体协同虚拟机保护方案。基于Mealy自动机对核心代码和关键数据进行混淆转换,采用虚拟机框架进行保护,将关键数据和核心代码迁移至第三方安全环境,最后结合篡改恢复和自毁技术构建本地软硬件和远程云端三位一体协同保护方案,构建了模拟系统,并基于测试保护程序验证了该保护方案的有效性和可行性。To address the security problem of single isolated environment in code isolation technology based on virtual machine(VM) protection framework, a trinity collaborative VM protection scheme was proposed. Firstly, the core code and critical data were obfuscated and transformed based on Mealy automata, and the virtual machine framework was used for protection. After that, the key data and core code were migrated to the third-party environment, and the tamper recovery and self-destruction techniques were combined to build the three-in-one collaborative protection scheme based on local hardware, software and remote cloud. Finally a simulation system was built to verify the effectiveness and feasibility of the protection scheme based on the test programs.

关 键 词：虚拟机保护 代码隔离 三位一体协同 Mealy机混淆 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]