TC:Large: Collaborative Research: Trustworthy Virtual Cloud Computing

该奖项由2009年美国复苏和再投资法案(公法第111-5条)资助。提案#：0910767协作提案#S：0909980、0910483、0910653标题：TC：大型：协作研究：值得信赖的虚拟云计算PI：彭宁、蒋旭贤和Mladen Vouk摘要：虚拟云计算正在成为IT管理的一种有前途的解决方案，可以简化复杂硬件和软件系统的配置和管理，并降低运营成本。随着业界的不断投入(如亚马逊弹性云计算、IBM蓝云)，虚拟云计算很可能成为未来IT解决方案的主要组成部分，对社会几乎所有行业都将产生重大影响。因此，虚拟云计算的可信性对于依赖虚拟云计算作为其IT解决方案的所有组织或个人的福祉至关重要。该项目设想了值得信赖的虚拟云计算，并调查了导致这一愿景的基础研究问题。这一愿景的核心是一个新的安全架构，它利用了新的机会和功能，例如内置的带外系统访问、可信计算的处理器和硬件支持，以及由管理程序进行的开箱即用检查。该项目专注于此安全架构之后的关键研究问题，包括增强虚拟云计算可信度的新安全服务、保护管理基础设施免受恶意工作负载的影响，以及保护托管工作负载免受潜在恶意管理基础设施的影响。这项研究将使行业和政府组织能够采用虚拟云计算进行关键IT管理。该项目将涉及研究生和本科生，并将生产开放源码软件和工具，并将向公众开放。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).Proposal#: 0910767 Collaborative Proposal #s: 0909980, 0910483, 0910653 Title: TC: Large: Collaborative Research: Trustworthy Virtual Cloud Computing PIs: Peng Ning, Xuxian Jiang, and Mladen Vouk Abstract: Virtual cloud computing is emerging as a promising solution to IT management to both ease the provisioning and administration of complex hardware and software systems and reduce the operational costs. With the industry?s continuous investment (e.g., Amazon Elastic Cloud Computing, IBM Blue Cloud), virtual cloud computing is likely to be a major component of the future IT solution, which will have significant impact on almost all sectors of society. The trustworthiness of virtual cloud computing is thus critical to the well-being of all organizations or individuals that will rely on virtual cloud computing for their IT solutions. This project envisions trustworthy virtual cloud computing and investigates fundamental research issues leading to this vision. Central to this vision is a new security architecture, which harnesses new opportunities and capabilities such as built-in out-of-band system access, processor and hardware support for trusted computing, and out-of-box examination by hypervisors. This project focuses on key research issues following this security architecture, including new security services that enhance the trustworthiness of virtual cloud computing, protection of management infrastructure against malicious workloads, and protection of hosted workloads from potentially malicious management infrastructure. The research will enable the adoption of virtual cloud computing for critical IT management in industry and government organizations. This project will involve both graduate and undergraduate students, and will produce open source software and tools, which will be made available to the public.