Virtual machine deployment method oriented to side channel attack defense of cloud computation environment

Abstract

The invention provides a virtual machine deployment method oriented to side channel attack defense of a cloud computation environment. The virtual machine deployment method comprises the following steps of: (1) user resource pool mapping based on number of virtual machines; (2) computation of user credibility; (3) user resource pool mapping based on credibility; and (4) deployment of the virtual machines. Due to adoption of the virtual machine deployment disclosed by the invention, the co-residing rate of the virtual machines in a system can be reduced by about 30 percent, and the resource utilization rate is reduced by about 5 percent; the isolation strength of a user virtual machine executing environment is effectively enhanced by reducing the co-residing rate of the virtual machines; and the virtual machine deployment method disclosed by the invention has the capability of effectively improving the side channel attack defense power of a cloud computation system and does not excessively lose resource utilization rate.

Description

【Technical field】 [0001] The invention relates to the field of computer technology, in particular to a virtual machine deployment method for side channel attack defense in a cloud computing environment. 【Background technique】 [0002] Cloud computing migrates computing and data resources from user desktops or within the enterprise to the Web, and almost all IT resources can be provided as cloud services: applications, programming tools, computing power, storage capacity, even communication services and collaboration tools, etc. . In the cloud computing environment, users only need to use network terminals (such as mobile phones, PDAs, PCs, etc.) to use various software, storage, computing and other services provided by cloud computing. At the same time, as a new network computing model, cloud computing can not only reduce the cost of IT equipment for enterprises, but also save large-scale enterprise budgets and provide IT services in a more economical way than traditional I...

AI Technical Summary

Problems solved by technology

However, in the cloud computing services that have been implemented, security and privacy issues have always been a concern, and have become one of the main factors hindering the popularization and promotion of cloud computing.

However, the current research on side-channel attack defense technology is mainly oriented to the stand-alone environment, and mainly has the following two deficiencies: (1) The calculation load is too large and it is oriented to non-standardized hardware, which is not ideal in the actual environment; (2) ) The proposal of these methods is based on the ideal condition that all side channel attack modes have been mastered, and it is also infeasible in the real environment

Images