vCerberus: A DRTM system based on virtualization technology

vCerberus: A DRTM system based on virtualization technology
复制标题

vCerberus:基于虚拟化技术的DRTM系统

DOI:
10.1007/s11859-010-0301-y
复制
发表时间:
2010-05
影响因子:
--
通讯作者:
Qinming He
Qinming He
中科院分区:
--
文献类型:
--
作者:
Wenzhi Chen;Zhipeng Zhang;Jianhua Yang;Qinming He

文献摘要

参考文献

相似文献

本文介绍了vCerberus,一种新的虚拟机管理程序,提供可信的和隔离的代码在虚拟域中执行。vCerberus非常小,同时允许在与虚拟域隔离的环境中执行安全敏感代码,并且可以由远程方以有效的方式进行认证。即使客户操作系统是恶意的,这些属性也将得到保证。这保护安全敏感代码免受客户OS中的恶意代码的影响,例如,内核rootkit提出了一种基于准虚拟化技术和可信协议(TPM)的虚拟化方法来动态测量和隔离虚拟机上的启动环境。我们的性能实验结果表明,由vCerberus引入的开销最小化,在vCerberus的启动环境的性能是具有竞争力的客户操作系统上运行的主流虚拟机管理程序。
This paper presents vCerberus, a novel hypervisor to provide trusted and isolated code execution within virtual domains. vCerberus is considerably tiny, while allowing secure sensitive codes to be executed in an isolated circumstance from the virtual domain, and can be attested by a remote party in an efficient way. These properties will be guaranteed even if the guest operating system is malicious. This protects the secure sensitive codes against the malicious codes in the Guest OS, e.g., the kernel rootkits. We present an approach to dynamically measure and isolate the launch environment on the virtual machines based on the para-virtualization technology and a novel virtualization of trusted platform module (TPM). Our performance experiment result shows that the overhead introduced by vCerberus is minimized; the performance of the launch environment in vCerberus is as competitive as the guest OS running on mainstream hypervisors.
DOI: 10.1145/945445.945462
发表时间: 2003-10
期刊: --
影响因子: --
作者:
Paul Barham;Boris Dragovic;K. Fraser;S. Hand;T. Harris;Alex Ho;R. Neugebauer;I. Pratt;A. Warfie
通讯作者: Paul Barham;Boris Dragovic;K. Fraser;S. Hand;T. Harris;Alex Ho;R. Neugebauer;I. Pratt;A. Warfie
DOI: 10.1145/1294261.1294289
发表时间: 2007-10
期刊: --
影响因子: --
作者:
Oren Laadan;Ricardo A. Baratto;Dan B. Phung;S. Potter;Jason Nieh
通讯作者: Oren Laadan;Ricardo A. Baratto;Dan B. Phung;S. Potter;Jason Nieh
DOI: 10.3724/sp.j.1016.2009.01311
发表时间: 2009
期刊: Chinese Journal of Computers
影响因子: --
作者:
Chen-Hsing Wen
通讯作者: Chen-Hsing Wen
DOI: 10.1007/978-1-4419-5906-5_498
发表时间: 2011
期刊: --
影响因子: --
作者:
Scott A. Rotondo
通讯作者: Scott A. Rotondo
DOI: --
发表时间: 1993-06
期刊: Datamation archive
影响因子: --
作者:
D. B. Davis
通讯作者: D. B. Davis