TC: Large: Collaborative Research: Trustworthy Virtual Cloud Computing

该奖项根据2009年美国复苏和再投资法案(公法第111-5条)获得资助。提案#：0910767合作提案#S：0909980,0910483,0910653标题：TC：大型：协同研究：值得信赖的虚拟云计算PI：彭宁、蒋旭贤和Mladen Vouk摘要：虚拟云计算正在成为IT管理的一种很有前途的解决方案，可以简化复杂硬件和软件系统的配置和管理，并降低运营成本。随着业界的不断投入(如亚马逊弹性云计算、IBM蓝云)，虚拟云计算很可能成为未来IT解决方案的主要组成部分，对社会几乎所有行业都将产生重大影响。因此，虚拟云计算的可信性对于依赖虚拟云计算作为其IT解决方案的所有组织或个人的福祉至关重要。该项目设想了值得信赖的虚拟云计算，并调查了导致这一愿景的基础研究问题。这一愿景的核心是一种新的安全体系结构，它利用了新的机会和功能，例如内置的带外系统访问、可信计算的处理器和硬件支持，以及由管理程序进行的开箱即用检查。该项目专注于此安全体系结构之后的关键研究问题，包括增强虚拟云计算可信度的新安全服务、保护管理基础设施免受恶意工作负载的影响，以及保护托管工作负载免受潜在有害管理基础设施的影响。这项研究将使行业和政府组织能够采用虚拟云计算进行关键IT管理。该项目将涉及研究生和本科生，并将生产开放源码软件和工具，并将向公众开放。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).Proposal#: 0910767Collaborative Proposal #s: 0909980, 0910483, 0910653Title: TC: Large: Collaborative Research: Trustworthy VirtualCloud ComputingPIs: Peng Ning, Xuxian Jiang, and Mladen VoukAbstract:Virtual cloud computing is emerging as a promising solution to ITmanagement to both ease the provisioning and administration of complexhardware and software systems and reduce the operational costs. With the industry?s continuous investment (e.g., Amazon Elastic Cloud Computing, IBM Blue Cloud), virtual cloud computing is likely to be a major component of the future IT solution, which will have significant impact on almost all sectors of society. The trustworthiness of virtual cloud computing is thus critical to the well-being of all organizations or individuals that will rely on virtual cloud computing for their IT solutions. This project envisions trustworthy virtual cloudcomputing and investigates fundamental research issues leading to this vision. Central tothis vision is a new security architecture, which harnesses newopportunities and capabilities such as built-in out-of-band systemaccess, processor and hardware support for trusted computing, andout-of-box examination by hypervisors. This project focuseson key research issues following this security architecture, including newsecurity services that enhance the trustworthiness of virtual cloudcomputing, protection of management infrastructure against maliciousworkloads, and protection of hosted workloads from potentiallymalicious management infrastructure. The research will enable the adoption of virtual cloud computing for critical IT management in industry and government organizations. This project will involve both graduate and undergraduate students, and will produce open source software and tools, which will be made available to the public.