| 基于邻接点的VMM动态完整性度量方法 |
| |
| 引用本文： | 吴 涛,杨秋松,贺也平.基于邻接点的VMM动态完整性度量方法[J].通信学报,2015,36(9):169-180. |
| |
| 作者姓名： | 吴 涛 杨秋松 贺也平 |
| |
| 作者单位： | 1. 中国科学院 软件研究所 基础软件国家工程研究中心，北京 100190；
2. 中国科学院 软件研究所 计算机科学国家重点实验室，北京 100190；3. 中国科学院大学，北京 100049 |
| |
| 基金项目： | 国家科技重大专项核高基金资助项目（2012ZX01039-004）；国家自然科学青年基金资助项目（61305054） |
| |
| 摘 要： | 对于虚拟机监控器的动态完整性度量，由于其位于特权层，且复杂多变，一直是领域内的研究难点。提出了一种基于邻接点的动态完整性度量方法，利用邻接点作为度量模块的宿主，通过面向内存页的完整性模型和评估算法，实现了动态完整性度量。实验表明，能够准确地检测到完整性受到破坏，且仅对计算密集型任务造成适中的性能损耗。
|
| 关 键 词： | 虚拟机监控器 完整性 动态度量 邻接点 度量环 |
Method of dynamic integrity measurement for
VMM based on adjacency data |
| |
| Tao WU,Qiu-song YANG,Ye-ping HE.Method of dynamic integrity measurement for
VMM based on adjacency data[J].Journal on Communications,2015,36(9):169-180. |
| |
| Authors: | Tao WU Qiu-song YANG Ye-ping HE |
| |
| Affiliation: | 1. NFS,Institute of Software,Chinese Academy of Sciences,Beijing 100190,China;2. State Key Laboratory of Computer Science,Institute of Software,Chinese Academy of Sciences,Beijing 100190,China;3. University of Chinese Academy of Sciences,Beijing 100049,China |
| |
| Abstract: | Due to its high privilege and complicated runtime memory, dynamic integrity measurement for VMM (virtual machine monitor) was always a great difficulty in the current study. An innovative method based on the adjacency data was proposed, which used a neighbor as the host of a measurement module. According to an integrity model in memory page granularity and a new improved measurement algorithm, dynamic integrity measurement for VMM was implemented. Experimental data shows it could detect the integrity broken accurately, only causing a moderate performance loss for computing intensive tasks. |
| |
| Keywords: | VMM integrity dynamic measurement adjacency data ring of measurement |
|
| 点击此处可从《通信学报》浏览原始摘要信息 |
|
点击此处可从《通信学报》下载全文 |
