Preventing Information Leakage from Administrators in Clouds Using Virtual Machines

本研究开发了一种机制，用于防止从虚拟机（VM）到云管理员的信息泄漏。首先，该机制通过在管理程序级别加密存储器内容来保护VM的存储器中的敏感信息。此外，它还通过识别未加密的内存区域来实现VM迁移。第二，该机制通过加密管理程序和远程管理客户端之间的输入和输出来保护敏感的磁盘和屏幕信息。

This study has developed a mechanism for preventing information leakage from virtual machines (VMs) to cloud administrators. First, the mechanism protects sensitive information in the VM's memory by encrypting the memory contents at the hypervisor level. In addition, it enables VM migration by identifying unencrypted memory regions. Second, the mechanism protects sensitive keystrokes and screen information by encrypting inputs and outputs between the hypervisor and remote management clients.