Segmentation method for trust domain of virtual machine monitor

Abstract

The invention discloses a segmentation method for a trust domain of a virtual machine monitor. The original control virtual machine is divided into nine service virtual machines according to different previous functions; each service virtual machine comprises a single-use control logic, and the control logic is deleted from the original control virtual machine. Each service virtual machine only has the authority of finishing the function per se, and each component is limited to access to Hypervisor with the required minimum authority, so the risk is clear. The method has the positive effects that vulnerability location can be effectively performed after attack accidents occur so as to perform remediation, the problem that the control power of the whole system can be obtained by breaking one component originally is solved, and the safety of the virtual machine is improved.

Description

technical field [0001] The present invention relates to the technical field of cloud computing security, in particular to a trust domain segmentation method for a virtual machine monitor, and how to reduce the trusted computing base of a virtual machine controller, thereby improving the security of the virtual machine. Background technique [0002] The traditional virtual machine trust domain is a large-scale trusted computing base, and it is concentrated on the control virtual machine. Among the existing technologies, there are technologies related to improving the security of virtual machine monitors, such as: [0003] Invention patent "A security control method for a virtual machine" (PRC patent application number 201210435354.X, publication date: February 13, 2013), which discloses a security control method for a virtual machine, by using the public key The data encrypts the source file of the virtual machine to obtain the encrypted file of the virtual machine, and retu...

AI Technical Summary

Problems solved by technology

However, the system described in this invention must be equipped with a driver isolation loading module and a memory information monitoring module for each virtual machine that needs to be isolated, and the virtual machine manager must also establish a corresponding shadow page table and memory information monitoring module for each client. Authorization table, which will consume a lot of system memory resources; every action of driver loading into the kernel will cause the client to submit a message to the virtual machine manager for its processing, especially in the case of multiple clients, which will make the virtual machine management The server processes a large amount of data and is easy to enter a busy state, and is even vulnerable to denial of service attacks; the writable memory range of the authorization table is pre-allocated by the virtual machine manager for the driver. If it is too small, it cannot resist overflow attacks; if it is too large, it will cause waste of memory space

Images