TC: Large: Collaborative Research: Trustworthy Virtual Cloud Computing

该奖项是根据2009年美国复苏和再投资法案（公法111-5）资助的。摘要：虚拟云计算作为IT管理的一种很有前途的解决方案正在兴起，它既能简化复杂硬件和软件系统的配置和管理，又能降低运营成本。这个行业？随着亚马逊的持续投资（例如，亚马逊弹性云计算，IBM蓝云），虚拟云计算很可能成为未来IT解决方案的主要组成部分，这将对几乎所有社会部门产生重大影响。因此，虚拟云计算的可靠性对于依赖虚拟云计算的IT解决方案的所有组织或个人的福祉至关重要。该项目设想了可信赖的虚拟云计算，并调查了导致这一愿景的基础研究问题。这一愿景的核心是一个新的安全体系结构，它利用了新的机会和功能，例如内置的带外系统访问、可信计算的处理器和硬件支持，以及管理程序的开箱即用检查。该项目侧重于此安全架构之后的关键研究问题，包括增强虚拟云计算可信度的新安全服务，保护管理基础设施免受恶意工作负载的侵害，以及保护托管工作负载免受潜在恶意管理基础设施的侵害。这项研究将使虚拟云计算能够用于工业和政府机构的关键IT管理。该项目将涉及研究生和本科生，并将生产开源软件和工具，这些软件和工具将向公众提供。

This award is funded under the American Recovery and Reinvestment Act of 2009 (Public Law 111-5).Proposal#: 0910767 Collaborative Proposal #s: 0909980, 0910483, 0910653 Title: TC: Large: Collaborative Research: Trustworthy Virtual Cloud Computing PIs: Peng Ning, Xuxian Jiang, and Mladen Vouk Abstract: Virtual cloud computing is emerging as a promising solution to IT management to both ease the provisioning and administration of complex hardware and software systems and reduce the operational costs. With the industry?s continuous investment (e.g., Amazon Elastic Cloud Computing, IBM Blue Cloud), virtual cloud computing is likely to be a major component of the future IT solution, which will have significant impact on almost all sectors of society. The trustworthiness of virtual cloud computing is thus critical to the well-being of all organizations or individuals that will rely on virtual cloud computing for their IT solutions. This project envisions trustworthy virtual cloud computing and investigates fundamental research issues leading to this vision. Central to this vision is a new security architecture, which harnesses new opportunities and capabilities such as built-in out-of-band system access, processor and hardware support for trusted computing, and out-of-box examination by hypervisors. This project focuses on key research issues following this security architecture, including new security services that enhance the trustworthiness of virtual cloud computing, protection of management infrastructure against malicious workloads, and protection of hosted workloads from potentially malicious management infrastructure. The research will enable the adoption of virtual cloud computing for critical IT management in industry and government organizations. This project will involve both graduate and undergraduate students, and will produce open source software and tools, which will be made available to the public.