Scheme of virtual machine trusted migration in cloud environment

Jianbiao ZHANG; Yuanxi ZHU; Jun HU; Xiao WANG

doi:10.11959/j.issn.2096-109x.2018009

您当前的位置：

首页 >

文章列表页 >

Scheme of virtual machine trusted migration in cloud environment

Papers | 更新时间：2024-06-03

- Scheme of virtual machine trusted migration in cloud environment
- Chinese Journal of Network and Information Security Vol. 4, Issue 1, Pages: 6-14(2018)
- 作者机构：
  
  1. 北京工业大学信息学部，北京 100124
  2. 可信计算北京市重点实验室，北京 100124
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018009
  CLC： TP302.1
- Online First：2018-01，
  
  Published：15 January 2018
- 稿件说明：
移动端阅览
Jianbiao ZHANG, Yuanxi ZHU, Jun HU, et al. Scheme of virtual machine trusted migration in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 6-14.
DOI：

Jianbiao ZHANG, Yuanxi ZHU, Jun HU, et al. Scheme of virtual machine trusted migration in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 6-14. DOI： 10.11959/j.issn.2096-109x.2018009.

摘要

现今云计算技术迅猛发展，虚拟机迁移技术作为云服务的一项优势，受到了广泛的关注和应用。然而，虚拟机动态迁移过程中存在平台认证复杂、数据传输安全性差等问题有待解决。为此，首先分析了现有的基于可信计算技术的虚拟机迁移方案，提出了云环境下基于可信计算技术的虚拟机动态迁移方案的3项安全要求：平台认证、数据传输保护和虚拟可信根原子性保护。然后提出了面向云环境的虚拟机可信迁移方案，其中引入了虚拟机中央迁移引擎和可信迁移代理，实现了迁移过程的虚拟可信根的原子性保护。最后给出了具体的方案实现与验证。

Abstract

With the rapid development of cloud computing

as an advantage of cloud services

virtual machine migration technology has been widely noticed and applied.However

there are some problems about VMs migration which should be solved

such as the complication of authentication of platform and the security issues of data transmission

etc.For these problems

firstly

the existing virtual machine migration scheme based on trusted computing technology was analyzed.Secondly

three secure needs that the virtual machine migration scheme which based on trusted computing technology should meet were proposed:the authenticated platform

confidentiality and integrity preserving transfer and atomicity of the vTPCM.Thirdly

a trusted migration scheme of virtual machines for cloud environment was proposed

in which the virtual machine central migration engine and trusted migration agent were introduced to solve the atomicity protection of vTPCM during the migration process.Finally

the concrete scheme was given with verification.

关键词

Keywords

references

张玉清 , 王晓菲 , 刘雪峰 , 等 . 云计算环境安全综述 [J ] . 软件学报 , 2016 , 27 ( 6 ): 1328 - 1348 .

ZHANG Y Q , WANG X F , LIU X F , et al . The review of cloud computing environment security [J ] . Journal of Software , 2016 , 27 ( 6 ): 1328 - 1348 .

WANG C , WANG Q , REN K , et al . Toward secure and dependable storage services in cloud computing [J ] . IEEE Transactions on Services Computing , 2012 , 5 ( 2 ): 220 - 232 .

LI W , TORDSSON J , ELMROTH E . Modeling for dynamic cloud scheduling via migration of virtual machines [C ] // IEEE Third International Conference on Cloud Computing Technology and Science . 2011 : 163 - 171 .

沈昌祥 , 张焕国 , 王怀民 , 等 . 可信计算的研究与发展 [J ] . 中国科学:信息科学 , 2010 ( 2 ): 139 - 166 .

SHEN C X , ZHANG H G , WANG H M , et al . Research and development of trusted computing [J ] . SCIENTIA China:Information Soences , 2010 ,( 2 ): 139 - 166 .

冯登国 . 可信计算:理论与实践 [M ] . 北京 : 清华大学出版社 , 2013 .

FENG D G . Trusted computing:theory and practice [M ] . Beijing : Tsinghua University PressPress , 2013 .

胡俊 , 沈昌祥 , 公备 . 可信计算3.0工程初步 [M ] . 北京：人民邮电出版社 , 2017 .

HU J , SHEN C X , GONG B . Trusted Computing 30,Preliminary Project [M ] . Beijing : Posts ＆ Telecom PressPress , 2017 .

HONG Z , WANG J , ZHANG H G . A trusted VM-vTPM live migration protocol in clouds [C ] // The International Workshop on Cloud Computing ＆ Information Security . 2013 : 299 - 302 .

DANEV B , MASTI R J , KARAME G O , et al . Enabling secure VM-vTPM migration in private clouds [C ] // The 27th Computer Security Applications Conference( ACSAC 2011) . 2011 : 187 - 196 .

LIANG X , JIANG R , KONG H . Secure and reliable VM-vTPM migration in private cloud [C ] // The International Symposium on Instrumentation and Measurement,Sensor Network and Automation . 2014 : 510 - 514 .

SUN M , REN W . Improvement on dynamic migration technology of virtual machine based on Xen [C ] // The International Forum on Strategic Technology . 2013 : 124 - 127 .

JOSHI A , NAGARAJAN V , VIGLAS S , et al . ATOM:atomic durability in non-volatile memory through hardware logging [C ] // IEEE International Symposium on High Performance Computer Architecture . 2017 : 361 - 372 .

Views

2352

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

HyperSpector:VMM dynamic trusted monitor based on UEFI

Research on consistency protection mechanism for secure states of virtual domain in cloud environment

Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing

Strategy of container migration and honeypot deployment based on signal game in cloud environment

Trust evaluation optimization mechanism for cloud user behavior based on FANP

Related Author

Fei1 YAN

Fan, HUANG

Zhi-hua LI

Kai WANG

Yan XIA

Hai JIN

De-qing ZOU

Wei-qi DAI

Related Institution

School of Computer,Wuhan University

Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education

School of Computer, Qinghai Normal University

School of Computer, North China Institute of Science and Technology

School of Cyber Science and Engineering, Wuhan University

⁰