云服务器虚拟机通信串口数据安全性监控仿真  

Cloud Server Virtual Machine Communication Serial Port Data Security Monitoring Simulation

作　　者：刘芳 曹进克[2] LIU Fang;CAO Jin-ke(School of Information Engineering,Zhengzhou University of Industrial Technology,Xinzheng Henan 451100,China;Information Engineering University,Zhengzhou Henan 450011,China)

机构地区：[1]郑州工业应用技术学院信息工程学院,河南新郑451100 [2]解放军信息工程大学,河南郑州450011

出　　处：《计算机仿真》2023年第8期174-177,190,共5页Computer Simulation

摘　　要：信息在云计算系统中扮演着重要角色,同时数据的安全也成为了领域内的热点问题之一,所以提出云服务器虚拟机通信串口数据安全性监控方法。为了保障串口通信的安全性,设计了包含初始化、用户管理、驱动程序和数据处理四部分安全技术模块,对选择合适的数据点实施拦截,并对用户数据进行加密与解密处理。然后对身份信息采用模糊身份机制处理,依据属性之间的关联来确定数据与身份的映射关系,并结合某一属性划分出数据用户身份信息的集合,从而得出该属性的熵。最后基于云服务平台的数据存储载体,以虚拟化可信平台模块作为基础,进行虚拟机模块迁移的安全性研究。实验结果表明,所提方法尽管增加了一些密文开销,但在允许的范围内可以较好的对通信数据进行安全性的保护。Information plays an important role in cloud computing systems.At the same time,data security has become one of the hot issues in this field.Therefore,a data security monitoring method of cloud server virtual machine communication serial port is proposed.Firstly,in order to ensure the security of serial communication,a security technology module including initialization,user management,driver and data processing is designed to intercept the appropriate data points,and encrypt and decrypt the user data.Then the identity information is processed by the fuzzy identity mechanism,the mapping relationship between data and identity is determined according to the association between attributes,and the set of data user identity information is divided according to an attribute,so as to obtain the entropy of the attribute.Finally,based on the data storage carrier of cloud service platform and the virtualization trusted platform module,the security of virtual machine module migration is studied.The experimental results show that although this method increases the ciphertext overhead,it can better protect the security of communication data within the allowable range.

关 键 词：串口通信 安全技术模块 模糊身份机制 云服务 虚拟机模块 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]