虚拟机镜像安全管理问题的研究

发布时间：2018-01-10 09:33

本文关键词：虚拟机镜像安全管理问题的研究　出处：《复旦大学》2012年硕士论文　论文类型：学位论文

【摘要】：“云计算”的概念自从2006年被提出以后,迅速成为IT领域最令人振奋的研究热点,受到了工业界和学术界广泛的关注。云计算提出至今已6年,云计算在国内外都得到快速的发展。云计算要得到进一步的发展还需要解决许多关键性的问题,其中安全性问题当属重中之重的问题。并且随着云计算应用的不断推广,安全问题的重要性呈现日趋上升的趋势,并且成为制约云计算进一步发展的首要因素。Google, Amazon等发起者不断爆出安全事故更加剧了人们对云计算的担忧。例如2009年Amazon EC2遭到阻断的服务攻击,Google电子邮件服务中断等。因此,要让企业大规模采用云计算平台,放心地将企业数据放到云中,必须首先解决云计算所面临的安全上的问题。 IaaS云服务商通常是以提供独立的虚拟机方式为用户提供服务,用户通过远程的方式管理虚拟机。提供虚拟机有利于降低用户的IT成本,提高云提供商的资源利用率和管理能力,这种方式也存在许多安全性问题。由于虚拟机相对便宜和容易地创建,用户往往为不同的任务创建不同的虚拟机。此外,用户可以克隆、快照、甚至可以回滚到以前的状态。虽然这些功能为用户提供了极大的灵活性,但它们对云平台成了的巨大安全风险。例如,一台虚拟机回滚,之前的安全漏洞又重新出现了。而且会出现越来越多的虚拟机,这种现象被称为虚拟机蔓延[1],使得虚拟机管理与软件更新补丁成为一件非常费时的任务。云提供商将虚拟机系统更新任务交给用户自己负责,而用户期望供应商来完成这项任务。因此,大量的虚拟机(运行或休眠)没有为软件打上最新的漏洞补丁。而及时为系统和程序打上最新的补丁能有效地防护最新的安全的威胁,提高系统的安全性。本文提出针对镜像安全问题的解决方案。首先提出基于过滤器机制的虚拟机镜像文件管理安全策略,该策略可以动态的增加或删除过滤器为虚拟机镜像文件管理提供可伸缩的安全管理。接着分析了在云环境下虚拟机镜像文件离线更新补丁技术存在四个挑战,并针对这四个挑战设计与实现虚拟机镜像文件离线更新补丁这关键的过滤器。
[Abstract]:The concept of "cloud computing" since 2006 have been proposed, IT quickly became the most exciting research focus, by industrial and academic attention. It has been 6 years since the proposed cloud computing, cloud computing has been rapid development at home and abroad. Cloud computing will get the development needs further to solve many important problems, the security problem is the priority among priorities. And with the continuous promotion of cloud computing applications, the importance of security issues show a rising trend, and.Google became the primary factor restricting the further development of cloud computing, Amazon and other sponsors continue to burst accidents exacerbated by the people of cloud computing for example, in 2009 Amazon EC2 fears. Blocked service attacks, Google e-mail service interruption. Therefore, to allow enterprises to large-scale use of cloud computing platform, the number of enterprises will be assured According to the cloud, the security problems facing cloud computing must be solved first.
IaaS cloud service providers are usually based on a virtual machine to provide independent provide services for users, users through the remote management of the virtual machine. The virtual machine to reduce the user cost of IT, improve the rate of utilization and management ability of the cloud provider's resources, this way there are many security problems because the virtual machine is relatively cheap. And easy to create, users often create a virtual machine for different tasks. In addition, the user can clone, snapshot, and even can be rolled back to a previous state. Although these offers great flexibility for users, a huge security risk but they became the cloud platform. For example, a virtual machine rollback security vulnerabilities before appeared again. The virtual machine and there will be more and more, this phenomenon is called virtual machine to spread [1], makes the management and virtual machine software updates become a non Often time-consuming tasks. Cloud provider virtual machine system update task to the user responsible for their own, and users expect suppliers to complete this task. Therefore, a large number of virtual machines (running or dormant) did not play the latest software patches. In the system and application for a new patch effective protection of the latest security threats, improve the security of the system.
This paper puts forward the solution to image security problems. Firstly, the virtual machine image file management mechanism based on security policy filter, this strategy can dynamically add or delete filters provide scalable security management for virtual machine image. Then analyzes the file management in the cloud environment virtual machine image file offline update patch technology four the challenge, and for these four challenges in the design and implementation of a virtual machine image file offline update filter patch this key.

【学位授予单位】：复旦大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP302;TP309

【相似文献】