Dynamic Integrity Detection Method of Virtual Machine Monitor Based on Security Chip

Abstract

The invention provides a virtual machine monitor dynamic integrity detection method based on a security chip. The method comprises the following steps: a security monitor is arranged in a virtual machine monitor, and an independent hardware security monitoring system is arranged at the connecting part of the virtual machine monitor and a computing node; the virtual machine monitor communicates with the hardware security monitoring system, and the security detection on the virtual machine monitor is realized through the security monitor and the hardware security monitoring system. By use of the method provided by the invention, the problem of the lack of the deficiency of the dynamic integrity and security detection of the virtual machine monitor in the computing node is solved; the dynamic integrity of the virtual machine monitor is detected under the condition that the hardware Trojan possibly exists in the computing node hardware system, thereby achieving an aim of guaranteeing the security of the virtual machine monitor and the computing node.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an integrity detection method for a virtual machine monitor during operation. Background technique [0002] Cloud computing concentrates computing / storage / communication resources on the cloud and provides users with their own services through the Internet. Including: Infrastructure as a Service (Infrastructure-as-a-Service, IaaS), Platform as a Service (Platform-as-a-Service, PaaS), Software as a Service (Software-as-a-Service, SaaS). Among them, infrastructure services, which provide users with scalable computing / storage / communication resources, are the basis of cloud computing. [0003] The virtualization of hardware resources is the core technology in cloud computing applications, and the security of the virtual machine monitor itself is a basic premise to ensure the security of the virtual machines running on it. Therefore, the security of the virtual machine m...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a method for detecting dynamic integrity of a virtual machine monitor based on a security chip, which solves the problem of lack of dynamic integrity and security detection of a virtual machine monitor in the operation of a computing node. When there may be a hardware Trojan horse in the hardware system, the dynamic integrity detection of the virtual machine monitor is performed to ensure the security of the virtual machine monitor and computing nodes

Images