obtaining the integrity of your virtual machine in the cloud

ISCAS OpenIR

	obtaining the integrity of your virtual machine in the cloud
	Yu Aimin; Qin Yu; Wang Dan
	2011
会议名称	2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011
会议录名称	Proceedings - 2011 3rd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2011
页码	213-222
会议日期	November 29, 2011 - December 1, 2011
会议地点	Athens, Greece
收录类别	EI
ISBN	9780769546223
部门归属	(1) State Key Laboratory of Information Security Institute of Software Chinese Academy of Science Beijing China
摘要	Infrastructure-as-a-service(IaaS) cloud provides the user the ability to use the computing resource of the cloud provider through renting a virtual machine(VM). At the same time it becomes an essential requirement for the user to verify the integrity of his VM. In this paper we designed and implemented TCG(trusted computing group)-based remote attestation for the Xen VM under the assumption that the trusted platform module(TPM) and hypervisor are secure and the privileged domain0 may be malicious. Firstly we realized load-time integrity measurement of the guest OS(operating system) kernel in the hypervisor directly and built the trust chain that is independent of the domain0. Secondly we realized the virtualized AIK(attestation identity key) and PCR(platform configuration register) that simulated the security functions of TPM AIK and PCR and supported VM migration, save and restore operations. Finally through the prototype implementation it is shown that the code complexity and the performance overhead are acceptable for the real system. © 2011 IEEE.; Infrastructure-as-a-service(IaaS) cloud provides the user the ability to use the computing resource of the cloud provider through renting a virtual machine(VM). At the same time it becomes an essential requirement for the user to verify the integrity of his VM. In this paper we designed and implemented TCG(trusted computing group)-based remote attestation for the Xen VM under the assumption that the trusted platform module(TPM) and hypervisor are secure and the privileged domain0 may be malicious. Firstly we realized load-time integrity measurement of the guest OS(operating system) kernel in the hypervisor directly and built the trust chain that is independent of the domain0. Secondly we realized the virtualized AIK(attestation identity key) and PCR(platform configuration register) that simulated the security functions of TPM AIK and PCR and supported VM migration, save and restore operations. Finally through the prototype implementation it is shown that the code complexity and the performance overhead are acceptable for the real system. © 2011 IEEE.
关键词	Computer Simulation Thermoelectric Power
主办者	University of Piraeus, Department of Digital Systems; OpenGridForum; IEEE; IEEE Computer Society; Cloud Computing Society; Univ. Aegean, Dep. Inf. Commun. Syst. Eng.
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16305
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Yu Aimin,Qin Yu,Wang Dan. obtaining the integrity of your virtual machine in the cloud[C],2011:213-222.