虚拟化安全建设研究

首先分析了虚拟化给传统信息安全带来的挑战,然后分别从边界防护、病毒防护、补丁管理以及虚拟化基础设施保护四个方面,阐述了在虚拟化环境下如何进行安全防护。     

基于TimeMark技术的网络级数据容灾设计与实施

建立存储虚拟化的网络级容灾系统,要注意数据的不一致或不完整的问题,因为由此可能导致系统无法启动或恢复。利用TimeMark技术建立容灾系统,存储设备可以为数据副本生成多个快照,记录数据副本在不同时刻的状态,可以有效地避免渐变式灾难带来的数据损坏,从而保障数据一致性和可用性。     

虚拟化技术在中职机房管理中的应用

本文以乌铁运校计算机虚拟化改造为基础,对当前虚拟化技术的主要产品进行了比较,并详细介绍了最后选型的产品VMware系列服务器虚拟化产品的安装、部署、优势以及虚拟化技术给机房管理带来的好处。     

基于容器的Web运行环境轻量级虚拟化方法

Web运行环境、Web服务及Web应用的虚拟化是减轻Web操作系统安全风险的一种有效方法,然而Web运行环境的虚拟化仍然存在不少挑战,如：执行时间、资源负载和兼容性等。为解决Web操作系统在安全性、执行时间、资源负载和兼容性方面的问题,提出了一种Web运行环境轻量级虚拟化方法,采用Docker容器技术实现进程级别的隔离。本虚拟化方法可在一个基本内核上支持运行多种Web运行环境的容器。此外,为了减轻容器创建负载,提出了容器启动机制;为减轻系统资源负载,进行了系统的轻量化处理。在嵌入式设备的实验结果表明,该虚拟化方法在执行时间、资源负载及兼容性方面都具有较优表现。     

A complete and efficient CUDA-sharing solution for HPC clusters

In this paper we detail the key features, architectural design, and implementation of rCUDA, an advanced framework to enable remote and transparent GPGPU acceleration in HPC clusters. rCUDA allows decoupling GPUs from nodes, forming pools of shared accelerators, which brings enhanced flexibility to cluster configurations. This opens the door to configurations with fewer accelerators than nodes, as well as permits a single node to exploit the whole set of GPUs installed in the cluster. In our proposal, CUDA applications can seamlessly interact with any GPU in the cluster, independently of its physical location. Thus, GPUs can be either distributed among compute nodes or concentrated in dedicated GPGPU servers, depending on the cluster administrator’s policy. This proposal leads to savings not only in space but also in energy, acquisition, and maintenance costs. The performance evaluation in this paper with a series of benchmarks and a production application clearly demonstrates the viability of this proposal. Concretely, experiments with the matrix–matrix product reveal excellent performance compared with regular executions on the local GPU; on a much more complex application, the GPU-accelerated LAMMPS, we attain up to 11x speedup employing 8 remote accelerators from a single node with respect to a 12-core CPU-only execution. GPGPU service interaction in compute nodes, remote acceleration in dedicated GPGPU servers, and data transfer performance of similar GPU virtualization frameworks are also evaluated.     

虚拟化安全服务器研究与设计

随着服务器虚拟化技术的推广与发展,深圳供电局开始引入虚拟化应用来提高硬件资源使用率,虚拟化技术在给深圳供电局带来便利的同时也暴露一些安全问题,例如出现针对虚拟化操作系统的新型攻击,在虚拟环境下无法有效实现访问控制、流量检测及安全审计等隐患。通过对虚拟化环境基础架构及虚拟化环境信息安全整体防护的探讨,提出一套适用于深圳供电局的虚拟化安全服务器解决方案。     

Challenges in real-time virtualization and predictable cloud computing

Cloud computing and virtualization technology have revolutionized general-purpose computing applications in the past decade. The cloud paradigm offers advantages through reduction of operation costs, server consolidation, flexible system configuration and elastic resource provisioning. However, despite the success of cloud computing for general-purpose computing, existing cloud computing and virtualization technology face tremendous challenges in supporting emerging soft real-time applications such as online video streaming, cloud-based gaming, and telecommunication management. These applications demand real-time performance in open, shared and virtualized computing environments. This paper identifies the technical challenges in supporting real-time applications in the cloud, surveys recent advancement in real-time virtualization and cloud computing technology, and offers research directions to enable cloud-based real-time applications in the future.     

虚拟化集群技术在消防业务中的应用

通过分析目前消防业务信息系统运维工作现状,将服务器虚拟化集群技术引用到消防业务系统运维工作中,大大提升系统服务器运行性能,更好地实现负载均衡,确保系统稳定可靠运行。     

桌面虚拟化技术在多媒体教室管理中的应用

本文分析了多媒体教室管理的现状,提出通过桌面虚拟化技术解决日常管理中存在的管理难度大、维护人员多、管理效率低等问题,努力提高多媒体教室管理的集中化、安全性和高效率。     

基于智能网络与虚拟化计算的移动办公系统信息安全的研究与应用简

本文基于政府行业3G网络和云计算环境移动办公系统的应用实例,重点讨论了构建以网络通信、区域边界、云计算环境、安全管控中心为基础的信息安全平台,为移动办公系统提供一个安全稳定的可信可控可管的移动应用环境的可行性,