Research on the Security Technology in Virtualization

doi:10.3969/j.issn.1671-1122.2016.09.015

Abstract

Abstract:

For prominent benefits in efficiency, agility, and innovation, cloud computing is widely taken attention by governments. During recent years, the virtualization technology as the core technology of the cloud computing has been further developed with the wide application of the cloud computing. The virtualization technology brings the convenient conditions to the cloud computing, but new security challenges are introduced. The paper made the in-depth research on the related documents and reality. The existing status of the virtualization security including virtual machine sprawl, peculiar set-up hidden, virtual machine hopping, virtual machine escape and denial of service attack, is analyzed from the hidden dangers and the attacks. The practical method of the virtualization security is proposed from three aspects including the security mechanisms of host, Hypervisor and VM. The security technical support is provided for the infrastructure platform.

Key words: cloud computing, virtualization, host security, Hypervisor security, VM security

CLC Number:

TP309

Yue GONG, Chao LI, Wei WU. Research on the Security Technology in Virtualization[J]. Netinfo Security, 2016, 16(9): 73-78.

Figures/Tables 3

References 11

[1]	蒋万春,汤立,等. 虚拟化安全问题探析[J]. 信息网络安全,2010(8):83-86.
[2]	肖斐. 虚拟化云计算中资源管理的研究与实现[D]. 西安:西安电子科技大学,2010.
[3]	章恒,禄凯. 构建云计算环境的安全检查与评估指标体系[J]. 信息网络安全,2014(9):115-119.
[4]	冯登国. 可证明安全性理论与方法研究[J]. 软件学报,2005(16):1743-1756.
[5]	张显龙. 云计算安全总体框架与关键技术研究[J]. 信息网络安全,2013(7):28-31.
[6]	陈驰,于晶. 云计算安全体系[M]. 北京:科学出版社,2014.
[7]	SHINAGAWA T, EIRAKU H, TANIMOTO K, et al.Bitvisor: A Thin Hypervisor for Enforcing I/O Device Security[C]//ACM. 5th International Conference on Virtual Execution Environments, March 11-13, Washington, DC, USA. New York: ACM, 2009: 121-130.
[8]	STEINBERG U, KAUER B.NOVA: A Microhypervisor-based Secure Virtualization Architecture[C]//ACM. 5th European Conference on Computer Systems, April 13-16, 2010, Paris, France. New York: ACM, 2010: 209-222.
[9]	林昆,黄征. 基于Intel VT-d技术的虚拟机安全隔离研究[J]. 信息安全与通信保密,2011(5):101-103.
[10]	PAYNE B D, CARBONE M, SHARIF M, et al.Lares: An Architecture for Secure Active Monitoring Using Virtualization[C]//IEEE. 29th IEEE Symposium on Security and Privacy, May 18-22, 2008, Washington, DC, USA. New Jersey: IEEE, 2008: 233-247.
[11]	GARFINKEL T, ROSENBLUM M. A Virtual Machine Introspection Based Architecture for Intrusion Detection[EB/OL]. , 2016-5-13.

[1]	Yuan LIU, Wei QIAO. Research and Optimization of Container Network Based on Kubernetes Cluster System in Cloud Environment [J]. Netinfo Security, 2020, 20(3): 36-44.
[2]	Jiameng BAI, Yingshuai KOU, Zeyi LIU, Daren ZHA. Docker-based RBAC Task Management System [J]. Netinfo Security, 2020, 20(1): 75-82.
[3]	Liangqin REN, Wei WANG, Qiongxiao WANG, Linli LU. A New Cloud Cryptographic Computing Platform Architecture and Implementation [J]. Netinfo Security, 2019, 19(9): 91-95.
[4]	Yi YU, Liangshuang LV, Xiaojian LI, Tianbo WANG. Dynamic Network Topology Description Language for Mobile Cloud Computing Scenario [J]. Netinfo Security, 2019, 19(9): 120-124.
[5]	Zixuan WANG, Liangshuang LV, Xiaojian LI, Tianbo WANG. A Shared Storage-based Virtual Machine Application Distribution Strategy for OpenStack [J]. Netinfo Security, 2019, 19(9): 125-129.
[6]	Yanpeng CUI, Luming FENG, Zheng YAN, Huaqing LIN. Research on Software Security Model of Cloud Computing Based on Program Slicing Technology [J]. Netinfo Security, 2019, 19(7): 31-41.
[7]	Xinrui GE, Wei CUI, Rong HAO, Jia YU. Verifiable Keywords Ranked Search Scheme over Encrypted Cloud Data [J]. Netinfo Security, 2019, 19(7): 82-89.
[8]	Chunqi TIAN, Jing LI, Wei WANG, Liqing ZHANG. A Method for Improving the Performance of Spark on Container Cluster Based on Machine Learning [J]. Netinfo Security, 2019, 19(4): 11-19.
[9]	Pu ZHAO, Wei CUI, Rong HAO, Jia YU. A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation [J]. Netinfo Security, 2019, 19(3): 81-86.
[10]	Zhenfeng ZHANG, Zhiwen ZHANG, Ruichao WANG. Model of Cloud Computing Security and Compliance Capability for Classified Protection of Cybersecurity 2.0 [J]. Netinfo Security, 2019, 19(11): 1-7.
[11]	Xinyang FENG, Jianjing SHEN. A Yarn and NMF Based Big Data Clustering Algorithm [J]. Netinfo Security, 2018, 18(8): 43-49.
[12]	Yuan TAO, Tao HUANG, Mohan ZHANG, Shuilin LI. Research and Development Trend Analysis of Key Technologies for Cyberspace Security Situation Awareness [J]. Netinfo Security, 2018, 18(8): 79-85.
[13]	Qi ZHANG, Xijun LIN, Haipeng QU. Identity-based Encryption Scheme Support Authorization Equality Test in Cloud Environment [J]. Netinfo Security, 2018, 18(6): 52-60.
[14]	LI Yue, JIANG Wei, JI Jiahua, DUAN Dezhong. Research on the Security Outsourcing Technology Based on Virtualization Platform [J]. 信息网络安全, 2018, 18(5): 82-88.
[15]	Yue LI, Wei JIANG, Jiahua JI, Dezhong DUAN. Research on the Security Outsourcing Technology Based on Virtualization Platform [J]. Netinfo Security, 2018, 18(5): 82-88.