云租户虚拟机主动可信验证机制的研究与应用

摘要

Recent years,cloud computing developed rapidly,and it’s security become the current research focus.But a lot of the researches about trusted computing are passive called by applications and use fixed format policies.It’s difficult to adapt the complicated relations.This paper presents a verify mechanism for virtual machines in cloud computing environment,this mechanism based on active trusted computing thought,through the acitive monitor,all components runs independently.It can works with complicated relations and adapt to dynamic distributed system.With this mechanism,users and facilitator make conifrm the standard trusted lib through SLA protocol,third-party veriifer provide report for users.Compared with conventional way,users can look up the report to know and ensured current security status of virtual machines in cloud computing environment.%近年来随着云计算的迅速发展，其安全问题也成为当前研究的热点，但是大多数研究采用被动调用机制和较为固化的策略定义的可信计算思想，很难适应云环境复杂的信任关系和需求。文章提出一种基于主动可信计算思想的云环境虚拟机主动可信验证机制，通过主动监控机制，各组件独立运行，便于设置复杂的信任关系，也可以适应动态、分布式的云环境。该机制针对云环境中运营商和租户的信任关系，由用户和运营商的SLA协议来制定基准可信库，由可信第三方来为租户提供可信报告。与传统技术相比，该机制使租户对自身拥有的虚拟机安全可以查阅和验证，保证了云环境中虚拟机的可信。