Secure Out-of-band Remote Management of Virtual Machines with Transparent Passthrough
Secure Out-of-band Remote Management of Virtual Machines with Transparent Passthrough
复制标题
DOI：
10.1145/3274694.3274749
复制
发表时间：
2018-12
期刊：
影响因子：
--
通讯作者：
S. Futagami;Tomoya Unoki;Kenichi Kourai
中科院分区：
文献类型：
--
作者：
S. Futagami;Tomoya Unoki;Kenichi Kourai
基础设施即服务云为用户提供带外远程管理以访问其虚拟机 (VM)。带外远程管理是一种通过虚拟设备间接访问虚拟机的方法。虽然虚拟化系统中运行的虚拟设备由云运营商管理，但并非所有云运营商始终受到云的信任。为了防止虚拟设备的信息泄露和I/O数据被篡改，已经提出了一些通过信任虚拟化系统中的管理程序来实现的系统。然而，他们在安全和管理方面存在各种问题。本文提出了 VSBypass，它使用一种称为透明直通的技术来实现虚拟化系统外部的安全带外远程管理。 VSBypass 使用嵌套虚拟化在外部虚拟机中运行整个虚拟化系统。然后，它拦截带外远程管理的 I/O 请求，并在虚拟化系统外部运行的影子设备中处理这些请求。我们在 Xen 中实现了 VSBypass，用于虚拟串行控制台和 GUI 远程访问。我们确认可以防止信息泄露，并且性能与传统带外远程管理相当。
Infrastructure-as-a-Service clouds provide out-of-band remote management for users to access their virtual machines (VMs). Out-of-band remote management is a method for indirectly accessing VMs via their virtual devices. While virtual devices running in the virtualized system are managed by cloud operators, not all cloud operators are always trusted in clouds. To prevent information leakage from virtual devices and tampering with their I/O data, several systems have been proposed by trusting the hypervisor in the virtualized system. However, they have various issues on security and management. This paper proposes VSBypass, which enables secure out-of-band remote management outside the virtualized system using a technique called transparent passthrough. VSBypass runs the entire virtualized system in an outer VM using nested virtualization. Then it intercepts I/O requests of out-of-band remote management and processes those requests in shadow devices, which run outside the virtualized system. We have implemented VSBypass in Xen for the virtual serial console and GUI remote access. We confirmed that information leakage was prevented and that the performance was comparable to that in traditional out-of-band remote management.