AES Flow Interception: Key Snooping Method on Virtual Machine - Exception Handling Attack for AES-NI -
AES Flow Interception: Key Snooping Method on Virtual Machine - Exception Handling Attack for AES-NI -
复制标题
DOI：
--
复制
发表时间：
2011
期刊：
影响因子：
--
通讯作者：
T. Takehisa;H. Nogawa;M. Morii
中科院分区：
文献类型：
--
作者：
T. Takehisa;H. Nogawa;M. Morii
在本文中，我们提出了一种在虚拟机监视器（VMM）上监听 AES 加密密钥的方法，并提出了针对这种攻击的对策。近年来，虚拟化技术迅速崛起，成为云计算的关键技术。一般来说，虚拟化技术由两个软件部分组成：一是虚拟机（VM）管理软件，称为虚拟机监视器（VMM），二是其相关软件。目前虚拟化技术还没有提供验证VMM可靠性的方法。在这种情况下，可能会出现以下情况：当恶意服务提供商提供被篡改的VMM并且其用户在这些VMM上运行他们的VM时，用户将遭受意外的信息泄露。作为一个泄漏案例，在本文中，我们提出了一种在 VMM 上监听 AES 加密密钥的方法。此外，我们还提出了针对这种关键窥探的对策。
In this paper, we propose a method for snooping AES encryption key on Virtual Machine Monitor (VMM), and we present countermeasures against this attack. Recently, virtualization technology has rapidly emerged as a key technology for cloud computing. In general, the virtualization technology composes two software parts: one is virtual machine (VM) management software called Virtual Machine Monitor (VMM), and the other is its associated software. The virtualization technology at present does not provide methods for certifying dependability of the VMMs. In this situation, the following case is possible: when malicious service providers serve tampered VMMs and their users run their VMs on these VMMs, the users will suffer unintended information leakage. As one leakage case, in this paper, we propose a method for snooping AES encryption key on the VMM. In addition, we present countermeasures against this key snooping.