Abstract:

Cloud service style has shield physical hardware view to cloud tenant, thus untrusted CSP（cloud service provider）may replace expensive physical memory by cheaper hard disk resource, which violates the SLA. Therefore, in order to audit memory SLA of cloud, a novel scheme for auditing physical memory of VM was proposed. This scheme is based on light-weight memory measurement SLA auditing by Xen layer to physical layer. Meanwhile, trust boot mechanism and HyperSentry module to ensure trust boot and integrity guarantee at running time were introduced. Then, digital signatures-based Diffie-Hellman key exchange protocol was also proposed to support strategy security exchange and trust alarm. The experimental results indicate that the proposed module can effectively audit VM memory SLA,and also support strong expansibility of cloud tenant customize strategy with low overhead.

Key words: cloud computing, memory SLA, audit, virtualization, Xen