TC:Large: Collaborative Research: Trustworthy Virtual Cloud Computing

该奖项是根据2009年美国复苏和再投资法案资助的（公法111 - 5）。提案编号：0910767合作提案编号：0909980、0910483、0910653标题：TC：大型：协作研究：可信赖的虚拟云计算PI：Peng Ning、Xuxian Jiang和Mladen Wendik摘要：虚拟云计算正在成为IT管理的一个有前途的解决方案，既简化了复杂硬件和软件系统的配置和管理，又降低了运营成本。与工业？的持续投资（例如，Amazon Elastic Cloud Computing、IBM Blue Cloud），虚拟云计算很可能成为未来IT解决方案的主要组成部分，对社会几乎所有领域都将产生重大影响。因此，虚拟云计算的可信度对于将依赖虚拟云计算为其IT解决方案的所有组织或个人的福祉至关重要。该项目设想了值得信赖的虚拟云计算，并调查了导致这一愿景的基础研究问题。这一愿景的核心是一个新的安全架构，它利用了新的机会和功能，例如内置的带外系统访问、对可信计算的处理器和硬件支持，以及虚拟机管理程序的开箱即用检查。该项目重点关注该安全架构之后的关键研究问题，包括增强虚拟云计算可信度的新安全服务，保护管理基础架构免受恶意工作负载的影响，以及保护托管工作负载免受潜在恶意管理基础架构的影响。 该研究将使虚拟云计算在行业和政府组织的关键IT管理中得以采用。这个项目将涉及研究生和本科生，并将产生开放源码软件和工具，将提供给公众。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).Proposal#: 0910767 Collaborative Proposal #s: 0909980, 0910483, 0910653 Title: TC: Large: Collaborative Research: Trustworthy Virtual Cloud Computing PIs: Peng Ning, Xuxian Jiang, and Mladen Vouk Abstract: Virtual cloud computing is emerging as a promising solution to IT management to both ease the provisioning and administration of complex hardware and software systems and reduce the operational costs. With the industry?s continuous investment (e.g., Amazon Elastic Cloud Computing, IBM Blue Cloud), virtual cloud computing is likely to be a major component of the future IT solution, which will have significant impact on almost all sectors of society. The trustworthiness of virtual cloud computing is thus critical to the well-being of all organizations or individuals that will rely on virtual cloud computing for their IT solutions. This project envisions trustworthy virtual cloud computing and investigates fundamental research issues leading to this vision. Central to this vision is a new security architecture, which harnesses new opportunities and capabilities such as built-in out-of-band system access, processor and hardware support for trusted computing, and out-of-box examination by hypervisors. This project focuses on key research issues following this security architecture, including new security services that enhance the trustworthiness of virtual cloud computing, protection of management infrastructure against malicious workloads, and protection of hosted workloads from potentially malicious management infrastructure. The research will enable the adoption of virtual cloud computing for critical IT management in industry and government organizations. This project will involve both graduate and undergraduate students, and will produce open source software and tools, which will be made available to the public.