面向云环境的虚拟机可信迁移方案

doi:10.11959/j.issn.2096-109x.2018009

Abstract

Abstract:

With the rapid development of cloud computing,as an advantage of cloud services,virtual machine migration technology has been widely noticed and applied.However,there are some problems about VMs migration which should be solved,such as the complication of authentication of platform and the security issues of data transmission,etc.For these problems,firstly,the existing virtual machine migration scheme based on trusted computing technology was analyzed.Secondly,three secure needs that the virtual machine migration scheme which based on trusted computing technology should meet were proposed:the authenticated platform,confidentiality and integrity preserving transfer and atomicity of the vTPCM.Thirdly,a trusted migration scheme of virtual machines for cloud environment was proposed,in which the virtual machine central migration engine and trusted migration agent were introduced to solve the atomicity protection of vTPCM during the migration process.Finally,the concrete scheme was given with verification.

Key words: trusted computing, cloud computing, vTPCM, virtual machine migration

CLC Number:

TP302.1

Jianbiao ZHANG,Yuanxi ZHU,Jun HU,Xiao WANG. Scheme of virtual machine trusted migration in cloud environment[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 6-14.

Figures/Tables 11

References 11

[1]	张玉清, 王晓菲, 刘雪峰 ,等. 云计算环境安全综述[J]. 软件学报, 2016,27(6): 1328-1348.
	ZHANG Y Q , WANG X F , LIU X F ,et al. The review of cloud computing environment security[J]. Journal of Software, 2016,27(6): 1328-1348.
[2]	WANG C , WANG Q , REN K ,et al. Toward secure and dependable storage services in cloud computing[J]. IEEE Transactions on Services Computing, 2012,5(2): 220-232.
[3]	LI W , TORDSSON J , ELMROTH E . Modeling for dynamic cloud scheduling via migration of virtual machines[C]// IEEE Third International Conference on Cloud Computing Technology and Science. 2011: 163-171.
[4]	沈昌祥, 张焕国, 王怀民 ,等. 可信计算的研究与发展[J]. 中国科学:信息科学, 2010(2): 139-166.
	SHEN C X , ZHANG H G , WANG H M ,et al. Research and development of trusted computing[J]. SCIENTIA China:Information Soences, 2010,(2): 139-166.
[5]	冯登国 . 可信计算:理论与实践[M]. 北京: 清华大学出版社, 2013.
	FENG D G . Trusted computing:theory and practice[M]. Beijing: Tsinghua University PressPress, 2013.
[6]	胡俊, 沈昌祥, 公备 . 可信计算3.0工程初步[M]. 北京：人民邮电出版社, 2017.
	HU J , SHEN C X , GONG B . Trusted Computing 30,Preliminary Project[M]. Beijing: Posts ＆ Telecom PressPress, 2017.
[7]	HONG Z , WANG J , ZHANG H G . A trusted VM-vTPM live migration protocol in clouds[C]// The International Workshop on Cloud Computing ＆ Information Security. 2013: 299-302.
[8]	DANEV B , MASTI R J , KARAME G O ,et al. Enabling secure VM-vTPM migration in private clouds[C]// The 27th Computer Security Applications Conference( ACSAC 2011). 2011: 187-196.
[9]	LIANG X , JIANG R , KONG H . Secure and reliable VM-vTPM migration in private cloud[C]// The International Symposium on Instrumentation and Measurement,Sensor Network and Automation. 2014: 510-514.
[10]	SUN M , REN W . Improvement on dynamic migration technology of virtual machine based on Xen[C]// The International Forum on Strategic Technology. 2013: 124-127.
[11]	JOSHI A , NAGARAJAN V , VIGLAS S ,et al. ATOM:atomic durability in non-volatile memory through hardware logging[C]// IEEE International Symposium on High Performance Computer Architecture. 2017: 361-372.

Metrics

Recommended 0

No Suggested Reading articles found!

参数	类型	意义
SourceHost	UUID	源服务器唯一标志
TargetHost	UUID	目标服务器唯一标志
TargetVm	UUID	待迁移虚拟机

参数	类型	意义
Vm_uuid	String	虚拟机唯一标识
Domin_id	Long	虚拟机域标识
Bios_string	Map<String,String>	BIOS信息
Sr_uuid	String	虚拟机SR的唯一标识

参数	类型	意义
Cpu_info	Map<String,String>	CPU信息
Host_uuid	String	主机唯一标志
Bios_string	Map<String,String>	BIOS信息
Software_version	Map<String,String>	软件信息
migrationReceive	Map<String,String>	迁移token,是否准备好接收迁移虚拟机

参数	类型	意义
VM_power_status	VM	虚拟机电源状态
vTPCM_migration_status	int	vTPCM迁移进度状态
vTPCM_reset_status	int	vTPCM复位状态

节点类型	数量	CPU	磁盘	内存
计算节点	2	Intel（R）Core i5-4590	1 TB	8 GB
控制节点	1	Intel（R）Core i5-4590	1 TB	8 GB
存储节点	1	Intel（R）Corei5-4590	1 TB	8 GB

Scheme of virtual machine trusted migration in cloud environment

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 11

Related Articles 15

Metrics

Recommended 0

[1]	Lingshu LI, Jiangxing WU, Wei ZENG, Wenyan LIU. Strategy of container migration and honeypot deployment based on signal game in cloud environment [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 87-96.
[2]	Shang LIU, Yinzhang GUO. Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 176-188.
[3]	Yi ZHANG, Liqin TIAN, Zenan WU, Wenxing WU. Trust evaluation optimization mechanism for cloud user behavior based on FANP [J]. Chinese Journal of Network and Information Security, 2022, 8(2): 175-182.
[4]	Bo ZHAO, Anqi YUAN, Yang AN. Application progress of SGX in trusted computing area [J]. Chinese Journal of Network and Information Security, 2021, 7(6): 126-142.
[5]	Guojie LIU, Jianbiao ZHANG, Ping YANG, Zheng LI. Research on the trusted environment of container cloud based on the TPCM [J]. Chinese Journal of Network and Information Security, 2021, 7(4): 164-174.
[6]	Guojie LIU,Jianbiao ZHANG. TPCM-based trusted PXE boot method for servers [J]. Chinese Journal of Network and Information Security, 2020, 6(6): 105-111.
[7]	Bo ZHAO, Xiang LI, Fei YAN, Liqiang ZHANG, Huanguo ZHANG. Trusted platform for third-party cloud computing online evaluation and analysis technology [J]. Chinese Journal of Network and Information Security, 2019, 5(5): 90-104.
[8]	Ying WU,Xuan LI,Biao JIN,Rongrong JIN. Survey on the privacy-preserving content based image retrieval [J]. Chinese Journal of Network and Information Security, 2019, 5(4): 14-28.
[9]	Jiyang LI,Pengyuan ZHAO,Zhe LIU. Trusted access scheme for intranet mobile terminal based on encrypted SD card [J]. Chinese Journal of Network and Information Security, 2019, 5(4): 108-118.
[10]	Ying LI, Chunguang MA. Overview of searchable encryption research [J]. Chinese Journal of Network and Information Security, 2018, 4(7): 13-21.
[11]	Mengyang YU,Hui LIN,Youliang TIAN. New cross-layer reputation mechanism for mobile cloud computing [J]. Chinese Journal of Network and Information Security, 2018, 4(3): 51-58.
[12]	Xiao YU,Li TIAN,Zhe LIU,Jie WANG. Research on key management and authentication protocol of PDA in smart grid [J]. Chinese Journal of Network and Information Security, 2018, 4(3): 68-75.
[13]	Yuanhao WANG,Hongbo LI,Yuzhao CUI,Qingwen GUO,Qiong HUANG. Survey on public key encryption with equality test [J]. Chinese Journal of Network and Information Security, 2018, 4(11): 13-22.
[14]	Weifeng LI,Weizhong QIANG,Weiming LI,Deqing ZOU. Research on forensics of privacy violations in cloud environment [J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35.
[15]	Yuan-zhao GAO,Xue-juan LI,Bing-long LI,Xi-xi WU. Cloud computing forensic model [J]. Chinese Journal of Network and Information Security, 2017, 3(9): 13-23.