中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 软件所图书馆  > 会议论文
Title:
obtaining the integrity of your virtual machine in the cloud
Author: Yu Aimin ; Qin Yu ; Wang Dan
Source: Proceedings - 2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011
Conference Name: 2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011
Conference Date: November 29, 2011 - December 1, 2011
Issued Date: 2011
Conference Place: Athens, Greece
Keyword: Computer simulation ; Thermoelectric power
Indexed Type: EI
ISBN: 9780769546223
Department: (1) State Key Laboratory of Information Security Institute of Software Chinese Academy of Science Beijing China
Sponsorship: University of Piraeus, Department of Digital Systems; OpenGridForum; IEEE; IEEE Computer Society; Cloud Computing Society; Univ. Aegean, Dep. Inf. Commun. Syst. Eng.
Abstract: Infrastructure-as-a-service(IaaS) cloud provides the user the ability to use the computing resource of the cloud provider through renting a virtual machine(VM). At the same time it becomes an essential requirement for the user to verify the integrity of his VM. In this paper we designed and implemented TCG(trusted computing group)-based remote attestation for the Xen VM under the assumption that the trusted platform module(TPM) and hypervisor are secure and the privileged domain0 may be malicious. Firstly we realized load-time integrity measurement of the guest OS(operating system) kernel in the hypervisor directly and built the trust chain that is independent of the domain0. Secondly we realized the virtualized AIK(attestation identity key) and PCR(platform configuration register) that simulated the security functions of TPM AIK and PCR and supported VM migration, save and restore operations. Finally through the prototype implementation it is shown that the code complexity and the performance overhead are acceptable for the real system. © 2011 IEEE.
English Abstract: Infrastructure-as-a-service(IaaS) cloud provides the user the ability to use the computing resource of the cloud provider through renting a virtual machine(VM). At the same time it becomes an essential requirement for the user to verify the integrity of his VM. In this paper we designed and implemented TCG(trusted computing group)-based remote attestation for the Xen VM under the assumption that the trusted platform module(TPM) and hypervisor are secure and the privileged domain0 may be malicious. Firstly we realized load-time integrity measurement of the guest OS(operating system) kernel in the hypervisor directly and built the trust chain that is independent of the domain0. Secondly we realized the virtualized AIK(attestation identity key) and PCR(platform configuration register) that simulated the security functions of TPM AIK and PCR and supported VM migration, save and restore operations. Finally through the prototype implementation it is shown that the code complexity and the performance overhead are acceptable for the real system. © 2011 IEEE.
Language: 英语
Content Type: 会议论文
URI: http://ir.iscas.ac.cn/handle/311060/16305
Appears in Collections:软件所图书馆_会议论文

Files in This Item:

There are no files associated with this item.


Recommended Citation:
Yu Aimin,Qin Yu,Wang Dan. obtaining the integrity of your virtual machine in the cloud[C]. 见:2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011. Athens, Greece. November 29, 2011 - December 1, 2011.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[Yu Aimin]'s Articles
[Qin Yu]'s Articles
[Wang Dan]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[Yu Aimin]‘s Articles
[Qin Yu]‘s Articles
[Wang Dan]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2022  中国科学院软件研究所 - Feedback
Powered by CSpace