Trustworthy computing base cutting method used for virtual machine system

Abstract

The invention discloses a trustworthy computing base anti-leakage cutting method used for a virtual machine system; the virtual machine system comprises a hardware layer, a virtual machine monitor layer, a virtual trusted platform module manager, a domain creating module, a kernel and a sensitive data access policy; the virtual trusted platform module manager, the domain creating module, the kernel and the sensitive data access policy are positioned at a privilege domain; the method is characterized in that: a special user domain which is isolated with the privilege domain is built, the virtual trusted platform module manager, the domain creating module and the sensitive data access policy are moved to the special user domain, and the kernel is kept in the privilege domain; communication is built between the privilege domain and the special user domain, and the trustworthy computing base is formed by the hardware layer, the virtual machine monitor layer, the virtual trusted platform module manager, the domain creating module and the sensitive data access policy; the invention provides a trustworthy computing base cutting proposal, the advantages of the traditional trustworthy computing base proposal is not only kept, but also the safety and starting speed of the virtual machine system are enhanced.

Description

technical field [0001] The invention relates to the technical field of computer information security, and mainly relates to a trusted computing base anti-leakage tailoring method for a virtual machine system. Background technique [0002] The survey results of the National Information Security Evaluation and Certification Center show that among numerous attacks and incidents, information leakage incidents are the main security incidents, which have brought huge economic losses to enterprises. Existing data leakage prevention systems are mainly implemented by embedding certain security modules in the operating system or by restricting network boundaries, but the credibility of the operating system cannot be guaranteed and various malicious software can infringe on sensitive data computing systems. The availability of existing anti-leakage mechanisms is severely compromised, compromising sensitive data security. [0003] A virtual machine system based on a virtual machine mon...

AI Technical Summary

Problems solved by technology

However, if the trusted computing base is too large, malicious behavior in the special area will pose a threat of leakage to the virtual machine with sensitive data. Therefore, it is necessary to decompose the privileged functions of the privileged domain to reduce the impact of malicious behavior in the privileged domain on the customer virtual machine.

In addition, the update and changes of privileged domain users or hypervisors are not conducive to the construction of the existing static trust chain, thus affecting the implementation of trusted verification for virtual machine environments (virtual machines and trusted computing bases) with sensitive data

Images