Virtual machine monitor dynamic integrity detection method based on security chip

Abstract

The invention provides a virtual machine monitor dynamic integrity detection method based on a security chip. The method comprises the following steps: a security monitor is arranged in a virtual machine monitor, and an independent hardware security monitoring system is arranged at the connecting part of the virtual machine monitor and a computing node; the virtual machine monitor communicates with the hardware security monitoring system, and the security detection on the virtual machine monitor is realized through the security monitor and the hardware security monitoring system. By use of the method provided by the invention, the problem of the lack of the deficiency of the dynamic integrity and security detection of the virtual machine monitor in the computing node is solved; the dynamic integrity of the virtual machine monitor is detected under the condition that the hardware Trojan possibly exists in the computing node hardware system, thereby achieving an aim of guaranteeing the security of the virtual machine monitor and the computing node.

Description

Technical field [0001] The present invention relates to the technical field of information security, and in particular to an integrity detection method for a virtual machine monitor during operation. Background technique [0002] Cloud computing concentrates computing / storage / communication resources in the cloud and provides users with their own services through the Internet. Including: Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), Software-as-a-Service (SaaS). Among them, infrastructure services provide users with scalable computing / storage / communication resources and are the foundation of cloud computing. [0003] Virtualization of hardware resources is the core technology in cloud computing applications. The security of the virtual machine monitor itself is a basic prerequisite for ensuring the security of virtual machines running on it. Therefore, the security of the virtual machine monitor, especially the dynamic security detection and dynamic integrity d...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a method for detecting dynamic integrity of a virtual machine monitor based on a security chip, which solves the problem of lack of dynamic integrity and security detection of a virtual machine monitor in the operation of a computing node. When there may be a hardware Trojan horse in the hardware system, the dynamic integrity detection of the virtual machine monitor is performed to ensure the security of the virtual machine monitor and computing nodes

Images