Security hardening method for virtual machine monitor based on security chip

Abstract

The invention provides a security chip-based security reinforcement method for a virtual machine monitor. According to the method, a security monitor is arranged in the virtual machine monitor; an independent hardware security monitoring system is arranged at the joint of the virtual machine monitor and a computing node; the virtual machine monitor communicates with the hardware security monitoring system; and the virtual machine monitor is subjected to security reinforcement through the security monitor and the hardware security monitoring system. Through the security monitor, a key point in running of a virtual machine can be effectively selected for performing security detection, so that not only the detection efficiency but also the detection accuracy are improved.

Description

technical field

[0001] The present invention relates to the technical field of information security, in particular to a security hardening system and method for a virtual machine monitor. Background technique

[0002] Cloud computing concentrates computing / storage / communication resources on the cloud and provides users with their own services through the Internet. Including: Infrastructure as a Service (Infrastructure-as-a-Service, IaaS), Platform as a Service (Platform-as-a-Service, PaaS), Software as a Service (Software-as-a-Service, SaaS). Among them, infrastructure services, which provide users with scalable computing / storage / communication resources, are the basis of cloud computing.

[0003] The virtualization of hardware resources is the core technology in cloud computing applications. The security of the virtual machine monitor itself is a basic premise to ensure the security of the virtual machines running on it. Therefore, the security of the virtual machine monito...

Images