Method of dynamic integrity measurement for VMM based on adjacency data

Tao WU; Qiu-song YANG; Ye-ping HE

doi:10.11959/j.issn.1000-436x.2015210

您当前的位置：

首页 >

文章列表页 >

Method of dynamic integrity measurement for VMM based on adjacency data

academic paper | 更新时间：2024-06-05

- Method of dynamic integrity measurement for VMM based on adjacency data
- Journal on Communications Vol. 36, Issue 9, Pages: 169-180(2015)
- 作者机构：
  
  1. 中国科学院软件研究所基础软件国家工程研究中心，北京 100190
  2. 中国科学院软件研究所计算机科学国家重点实验室，北京 100190
  3. 中国科学院大学，北京 100049
- 作者简介：
- 基金信息：
  
  The National Science and Technology Major Program of China(2012ZX01039-004);The Youth Project of the National Natural Science Foundation of China(61305054)
- DOI：10.11959/j.issn.1000-436x.2015210
  CLC： TP309
- Online First：2015-09，
  
  Published：25 September 2015
- 稿件说明：
移动端阅览
Tao WU, Qiu-song YANG, Ye-ping HE. Method of dynamic integrity measurement for VMM based on adjacency data[J]. Journal on Communications, 2015, 36(9): 169-180.
DOI：

Tao WU, Qiu-song YANG, Ye-ping HE. Method of dynamic integrity measurement for VMM based on adjacency data[J]. Journal on Communications, 2015, 36(9): 169-180. DOI： 10.11959/j.issn.1000-436x.2015210.

摘要

对于虚拟机监控器的动态完整性度量，由于其位于特权层，且复杂多变，一直是领域内的研究难点。提出了一种基于邻接点的动态完整性度量方法，利用邻接点作为度量模块的宿主，通过面向内存页的完整性模型和评估算法，实现了动态完整性度量。实验表明，能够准确地检测到完整性受到破坏，且仅对计算密集型任务造成适中的性能损耗。

Abstract

Due to its high privilege and complicated runtime memory

dynamic integrity measurement for VMM (virtual machine monitor) was always a great difficulty in the current study.An innovative method based on the adjacency data was proposed

which used a neighbor as the host of a measurement module.According to an integrity model in memory page granularity and a new improved measurement algorithm

dynamic integrity measurement for VMM was imple-mented.Experimental data shows it could detect the integrity broken accurately

only causing a moderate performance loss for computing intensive tasks.

关键词

Keywords

references

MCCUNE J , PARNO B , PERRIG A , et al . Minimal TCB code execu-tion [A ] . Proc of IEEE Symposium on Security and Privacy [C ] . 2007 . 267 - 272 .

MCCUNE J , PARNO B , PERRIG A , et al . An execution infrastructure for TCB minimization [A ] . Proc of Eurosys [C ] . 2008 .

MCCUNE J , LI Y , QU N , et al . TrustVisor:efficient TCB reduction and attestation [A ] . Proc of IEEE Symposium on Security and Pri-vacy [C ] . 2010 . 143 - 158 .

SANDHU R S . On five definitions of data integrity [A ] . Proc of the 7th IFIP WG 11.3 Working Conference on Database Security [C ] . 1993 . 257 - 268 .

Department of Defense,USA . Trusted Computer System Evaluation Criteria,TCSEC [S ] . 1985 .

Trusted Computing Group . TPM Main Specification Level 2,Revision 116 [EB/OL ] . http://www.trustedcomputinggroup.org/resources/tpm_main_specification http://www.trustedcomputinggroup.org/resources/tpm_main_specification .

HOFMANN O , KIM S , DUNN A , et al . Inktag:secure applications on an untrusted operating system [A ] . Proc of the 18th International Con-ference on Architectural Support for Programming Languages and Operating Systems,ASPLOS 2013 [C ] . 2013 . 253 - 264 .

WANG Z , WU C , GRACE M , et al . Isolating commodity hosted hypervisors with hyperlock [A ] . Proc of Eurosys [C ] . 2010 . 127 - 140 .

CRISWELL J , DAUTENHAHN N , ADVE V . Virtual ghost:protecting applications from hostile operating systems [A ] . Proc of the 19th In-ternational Conference on Architectural Support for Programming Languages and Operating Systems,ASPLOS 2014 [C ] . 2014 . 81 - 96 .

SAILER R , ZHANG X , JAEGER T , VAN DOORN L . Design and implementation of a TCG-based integrity measurement architecture [A ] . Proc of the 13th USENIX Security Symposium [C ] . 2004 . 16 .

KIL C , SEZER E , AZAB A , NING P , ZHANG X . Remote attestation to dynamic system properties:towards providing complete system in-tegrity evidence [A ] . Proc of the 39th International Conference on De-pendable Systems and Networks [C ] . 2009 .

ZHANG F , CHEN H B . Security-preserving live migration of virtual machines in the cloud [J ] . Journal of Network and Systems Manage-ment , 2013 , 21 ( 4 ): 562 - 587 .

AZAB A , NING P , WANG Z , et al . HyperSentry:enabling stealthy in-context measurement of hypervisor integrity [A ] . Proc of the 17th Con-ference on Computer and Communications Security [C ] . 2010 . 38 - 49 .

AZAB A , NING P , SEZER E , et al . A hypervisor-based integrity measurement agent [A ] . Proc of the Annual Computer Security Appli-cations Conference [C ] . 2009 . 461 - 470 .

DAVI L , SADEGHI A , WINANDY M . Dynamic.integrity measure-ment and attestation:towards defense against return-oriented pro-gramming attacks [A ] . Proc of the 2009 ACM Workshop on Scalable Trusted Computing [C ] . 2009 . 49 - 54 .

LIU Z , LEE J , ZENG J , et al . CPU transparent protection of OS kernel and hypervisor integrity with programmable DRAM [A ] . Proc of The 40th In-ternational Symposium on Computer Architecture [C ] . 2013 . 392 - 403 .

SAILER R , ZHANG X , JAEGER T , et al . Design and implementation of a TCG-based integrity measurement architecture [A ] . Proc of the 13th Usenix Security Symposium [C ] . 2004 .

WANG Z , JIANG X X . Hypersafe:a lightweight approach to provide lifetime hypervisor control-flow integrity [A ] . Proc of IEEE Sympo-sium on Security and Privacy [C ] . 2010 .

CLARK C , FRASER K , HAND S , et al . Live migration of virtual machines [A ] . Proc of the 2nd Symposium on Networked Systems De-sign and Implementation [C ] . 2005 .

JO C , GUSTAFSSON E , SON J , et al . Efficient live migration of virtual machines using shared storage [A ] . Proc of the 9th Annual International Conference on Virtual Execution Environments [C ] . 2013 . 41 - 50 .

SONG X , SHI J C , LIU R , et al . Parallelizing live migration of virtual machines [A ] . Proc of the 9th Annual International Conference on Virtual Execution Environments [C ] . 2013 . 85 - 96 .

TAKEMURA C , CRAWFORD L . The Book of Xen:A Practical Guide for the System Administrator [A ] . No Starch Press , 2009 .

Xen Project .[EB/OL ] http://www.xenproject.org http://www.xenproject.org .

WANG Z , JIANG X X , CUI W D , et al . Countering kernel rootkits with lightweight hook protection [A ] . Proc of the 16th ACM Conference on Computer and Communications Security [C ] . 2009 .

Views

1513

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Data comparable encryption scheme based on cloud computing in Internet of things

Study on enhancing integrity for BLP model

Noninterference model for integrity

Related Author

Qian MENG

Jianfeng MA

Kefei CHEN

Yinbin MIAO

Tengfei YANG

LIU Yan-ming

DONG Qing-kuan

LI Xiao-ping

Related Institution

School of Telecommunication Engineering, Xidian University

School of Computer Science and Technology,Xidian University

School of Cyber Engineering, Xidian University

School of Science,Hangzhou Normal University

School of Communications Engineering,Xidian University

AI问答

⁰