TWC: Small: Self-Service Cloud Computing

云计算对客户数据的安全构成重大风险。作为云系统基础的虚拟机监视器（vmm）通常具有强大的管理域，可以被利用或滥用来窥探客户端虚拟机（vm）并窃取/修改其数据。此外，尽管虚拟机技术支持客户机可能希望使用的几种新型安全服务，但这些服务具有特权，必须在管理域中实现。本项目开发自助服务云计算（SSC）模型，以提高客户端数据的安全性。SSC使用特权分离来减少授予系统范围管理域的特权，并向客户公开新的抽象，从而使他们能够更好地控制自己的vm。因此，SSC减轻了通过管理域直接针对客户端vm的攻击的影响，并允许客户端在自己的vm上部署安全服务。SSC可以通过改善对云上客户端数据的威胁，从而鼓励客户迁移到云上，从而产生广泛的影响。在这个项目中开发的云应用程序市场的概念也可能是独立的兴趣。该项目还包括一个教育部分，将开发新的云相关材料，纳入研究生和本科课程。

Cloud computing poses significant risks to the security of client data. Virtual Machine Monitors (VMMs) that underlie cloud systems typically have all-powerful administrative domains that can be exploited or misused to snoop on client virtual machines (VMs) and steal/modify their data. Moreover, although virtual machine technology enables several novel security services that clients may wish to use, such services are privileged and must be implemented within the administrative domain. This project develops the Self-service Cloud Computing (SSC) model to improve the security of client data. SSC employs privilege separation to reduce the privileges granted to the system-wide administrative domain, and expose new abstractions to clients that give them greater control over their VMs. Thus, SSC mitigates the impact of attacks directed on client VMs via the administrative domain, and allows clients to deploy security services on their own VMs.SSC can have broad impact by ameliorating the threats to client data on the cloud, thus encouraging clients to move to the cloud. The concept of cloud app markets developed in this project is also likely to be of independent interest. The project also includes an educational component that will develop new cloud-related material for inclusion in graduate and undergraduate curricula.