Secure data sharing between domains in Xen

摘要

Currently Xen has not provided a secure and efficient communication mechanism for data transmission between virtual machines which are deployed on the same physical platform. In this paper, we proposes a secure inter-domain communication mechanism for the different domains on the same physical platform in Xen virtualization environment, and implements a prototype system. Experiments show that the prototype system can prevent the other distrust domain, including privileged domain, through the virtual machine introspection method accessing to the communication information, and it is more efficient than the traditional network transmission.