Method for responding to trusted computing TOCTOU attacks on hardware virtual domain of Xen client

Abstract

The invention relates to a method for responding to the trusted computing TOCTOU attacks on the hardware virtual domain of a Xen client, which takes system performance into consideration on the premise of preventing attacks effectively. In the method, 1 hypercall and 10 virtual interrupts are defined between a Xen privileged domain and a virtual machine monitor for transmitting information about the method between the virtual machine monitor and the privileged domain; and the components used by the responding method comprise a forwarding module and an attach signal processing module which arerealized in a trusted simulation equipment module of the privileged domain, a forwarding module which is realized in the kernel space of the privileged domain, and an attack management module which is realized in the virtual machine monitor. When the system of the invention is implemented, the trusted computing TOCTOU attacks on the hardware virtual domain can be responded to effectively; the responding method of the invention is highly practical and has very small influences on the system performance under a condition of not receiving an attack signal; and the method has little modification in the original system, but has expandability which so high as to enable the method to apply to a working environment in which many trusted client hardware virtual domain operate parallelly.

Description

technical field [0001] The invention relates to the field of trusted computing for computer information security, and is an effective method for responding to the TOCTOU attack of TCG trusted computing under the Xen hardware virtual domain environment. Background technique [0002] The TCG architecture uses the contents of the PCR register of the TPM hardware chip solidified on the computer motherboard to determine the security of the actual platform. However, the design patterns of most commercial operating systems make the TCG architecture, which only provides software loading verification, vulnerable to TOCTOU (time of check vs time of use) attacks, which are called trusted computing TOCTOU attacks. [0003] Xen virtual machine is a mature open source virtualization product, including a virtual machine monitor, a privileged domain and multiple customer virtual domains. The virtual machine monitor is located between the system hardware platform and the virtual domain oper...

AI Technical Summary

Problems solved by technology

[0006] For trusted computing TOCTOU attacks in customer virtual domains, there are currently many detection methods based on virtual machine monitors, but how to respond to the detected trusted computing TOCTOU attacks in customer virtual domains, that is, how to make the customer virtual domain The virtual trusted device correctly reflects the state of the customer's virtual domain platform, and there is currently no publicly available method

Images