KVM虚拟化动态迁移技术的安全防护模型

发布时间：2018-09-10 15:14

【摘要】：虚拟机动态迁移技术是在用户不知情的情况下使得虚拟机在不同宿主机之间动态地转移,保证计算任务的完成,具有负载均衡、解除硬件依赖、高效利用资源等优点,但此技术应用过程中会将虚拟机信息和用户信息暴露在网络通信中,其在虚拟化环境下的安全性成为广大用户担心的问题,逐渐成为学术界讨论和研究的热点问题.从研究虚拟化机制、虚拟化操作系统源代码出发,以虚拟机动态迁移的安全问题作为突破点,首先分析了虚拟机动态迁移时的内存泄漏安全隐患;其次结合KVM(kernel-based virtual machine)虚拟化技术原理、通信机制、迁移机制,设计并提出一种基于混合随机变换编码方式的安全防护模型,该模型在虚拟机动态迁移时的迁出端和迁入端增加数据监控模块和安全模块,保证虚拟机动态迁移时的数据安全;最后通过大量实验,仿真测试了该模型的安全防护能力和对虚拟机运行性能的影响.仿真结果表明,该安全防护模型可以在KVM虚拟化环境下保证虚拟机动态迁移的安全,并实现了虚拟机安全性和动态迁移性能的平衡.
[Abstract]:Virtual machine dynamic migration technology is to make virtual machine dynamically transfer between different hosts without the user's knowledge, ensure the completion of computing tasks, have the advantages of load balance, release of hardware dependence, efficient use of resources, and so on. However, the virtual machine information and user information will be exposed to network communication in the process of application of this technology. The security of virtual environment has become a concern for the majority of users, and has gradually become a hot issue discussed and studied in academic circles. Based on the research of virtualization mechanism and the source code of virtualized operating system, the security problem of virtual machine dynamic migration is taken as the breakthrough point. Firstly, the hidden danger of memory leakage is analyzed. Secondly, combined with KVM (kernel-based virtual machine) virtualization technology, communication mechanism, migration mechanism), a security protection model based on hybrid random transform coding is designed and proposed. In order to ensure the data security of virtual machine dynamic migration, the model adds data monitoring module and security module to the outgoing and incoming end of virtual machine dynamic migration. Finally, a large number of experiments are carried out. The simulation tests the security protection ability of the model and its influence on the performance of virtual machine. Simulation results show that the security protection model can guarantee the security of virtual machine dynamic migration in KVM virtualization environment, and achieve the balance between virtual machine security and dynamic migration performance.
【作者单位】：中国科学院信息工程研究所;中国科学院研究生院;国家保密科技测评中心;北京交通大学;
【基金】：国家自然科学基金(61502486)~~
【分类号】：TP309

【相似文献】