...
  • 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>Journal of Computers >TrustOSV: Building Trustworthy Executing Environment with Commodity Hardware for a Safe Cloud
【24h】

TrustOSV: Building Trustworthy Executing Environment with Commodity Hardware for a Safe Cloud

机译：TrustOSV：建立具有商品硬件的值得信赖的执行环境，为安全云

获取原文
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

—The Infrastructure as a Service (IaaS) cloud computing model is widely used in current IT industry, providing the cloud users virtual machines as the executing environment. However, current executing environment the cloud provided is not trustworthy. For a user’s executing environment faces threats from malicious cloud users who aim at attacking the underlying virtualization software (virtual machine monitor, VMM, or hypervisor). In this paper, we first make an analysis of the potential threats to a commodity hypervisor, and then propose architecture to build a more trustworthy executing environment for IaaS cloud. The main ideas of our architecture are: removing interaction between hypervisor and the exposed executing environment, enhancing platform data secrecy as well as providing feature rich environment attestation. To prove the effectiveness of our architecture, we build a prototype system, named TrustOSV, which can host multiple trustworthy isolated computing environments on multi-core x86 hardware. The final evaluation shows that TrustOSV can provide enhanced security guarantees to the exposed VMs at modest cost.
机译：- 作为服务（IAAS）云计算模型的基础架构广泛用于当前IT行业，为云用户虚拟机提供作为执行环境。但是，当前执行环境提供的云不值得信赖。对于用户的执行环境，面临旨在攻击底层虚拟化软件（虚拟机监视器，VMM或虚拟机管理程序）的恶意云用户的威胁。在本文中，我们首先对商品管理程序进行潜在威胁分析，然后提出建筑以为IAAS云构建更值得信赖的执行环境。我们的架构的主要思想是：删除管理程序之间的交互和公开的执行环境，增强平台数据保密以及提供功能丰富的环境认证。为了证明我们架构的有效性，我们构建了一个名为TrustOSV的原型系统，它可以在多核X86硬件上托管多个值得信赖的计算环境。最终的评估表明，TrustOSV可以以适度的成本提供增强的安全保证。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号