一种云环境中的虚拟机回滚安全模型  

A Security Model for Virtual Machine Rollback in Cloud Environments

作　　者：黄庆 许阳光 姜文超[2] 代炜琦[3] 

机构地区：[1]广州市数字政府运营中心,广东 广州 [2]广东工业大学计算机学院,广东 广州 [3]华中科技大学网络空间安全学院,湖北 武汉

出　　处：《计算机科学与应用》2024年第6期196-207,共12页Computer Science and Application

摘　　要：虚拟机(VM)回滚可能会被滥用来对系统发动攻击,导致无论是否使用可信计算技术(TPM),云环境安全问题始终存在,对云计算安全提出严峻挑战。本文报告了在使用TPM环境中和不使用TPM环境中实施成功的攻击实验,分析了导致云安全问题的根本原因,提出一种基于回滚弹性虚拟TPM (rvTPM)的虚拟机回滚安全解决方案。rvTPM基于Xen环境设计实现并测试,实验结果表明:rvTPM在确保虚拟机回滚安全的前提下,不会对云计算环境造成任何明显的性能损失。Virtual machine (VM) rollback may be misused to launch attacks on the system, leading to persistent security problems in cloud environments, regardless of whether Trusted Platform Module (TPM) is utilized or not. This poses a serious challenge to the security of the cloud. This paper reports successful attack experiments conducted in both TPM-enabled and non-TPM-enabled environments, analyzes the fundamental causes of cloud security issues, and proposes a secure solution for virtual machine rollback based on rollback-resilient virtual TPM (rvTPM). rvTPM is designed and implemented based on Xen environments. The experimental results demonstrate that rvTPM provides a secure solution for virtual machine rollback without causing any significant performance degradation in cloud computing environments.

关 键 词：rvTPM TPM 云计算 虚拟机回滚 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]