Trusted virtualization system

Abstract

The invention discloses a trusted virtualization system, which is characterized by comprising a host machine and a virtual machine manager running on the host machine, the virtual machine manager allocates a virtual BIOS, virtual measurement equipment and a virtual machine trusted migration module for each virtual machine on the host machine; wherein the virtual BIOS is used for executing measurement on a virtual machine core file set in a virtual machine mirror image in the starting process of the virtual machine; the virtual measurement equipment is used for actively and dynamically measuring a set important object in a system memory of the virtual machine in the running process of the virtual machine, and storing a measurement result to a built-in security chip; the virtual machine trusted migration module is used for transmitting measurement information of virtual measurement equipment of a source virtual machine to virtual measurement equipment of a target virtual machine in the virtual machine migration process, and the consistency of trusted startup information and trusted measurement information before and after migration and the continuity of trusted measurement operation before and after migration are guaranteed.

Description

technical field [0001] The invention belongs to the field of virtual cloud security, and in particular relates to a trusted virtualization system. Background technique [0002] With the rapid development of information technology, incidents that endanger information security continue to occur, and the situation of information security is becoming increasingly severe. The March 2020 Internet Security Threat Report released by the National Internet Emergency Response Center (CNCERT) pointed out that the number of terminals infected with network viruses in China was nearly 1.51 million, and the National Information Security Vulnerability Sharing Platform (CNVD) collected and sorted out 2,076 information system security vulnerabilities. , including 765 high-risk vulnerabilities and 1,591 vulnerabilities that can be exploited for remote attacks. System security issues will affect national security, economic development, and social stability. [0003] Virtualization technology i...

AI Technical Summary

Problems solved by technology

In addition, the inherent isolation properties of virtualization technology improve the security of the application running environment, but this isolation also brings about the problem that the inside of the virtual machine cannot be controlled by physical security hardware

[0004] In the current academia and industry, the system security protection technology based on the hardware trust base has been relatively perfect, but there are still some problems in the technology based on the hardware trust base, especially its lack of protection for the virtualization system and the inside of the virtual machine

Images