CAJ | 학술논문

虚拟计算环境的开放性、复杂性和动态性向入侵容忍提出了新的挑战,提出VFRS方法以解决虚拟计算环境中数据对入侵的容忍问题.设计SCSFA算法分析虚拟计算环境的系统调用行为序列,以识别虚拟计算环境下的入侵企图,预测敏感数据的高危区域;其次,将要保护的数据划分成若干片数据,并以容忍虚拟计算环境随机错误为目标对每个片数据冗余备份;然后将冗余片数据分散到不同虚拟机上.VFRS方法能有效预测虚拟计算环境下的异常入侵,并能较好地容忍虚拟计算环境下的复杂性错误.对VFRS 方法实现的关键问题进行了详细的讨论和分析.
허의계산배경적개방성、복잡성화동태성향입침용인제출료신적도전,제출VFRS방법이해결허의계산배경중수거대입침적용인문제.설계SCSFA산법분석허의계산배경적계통조용행위서렬,이식별허의계산배경하적입침기도,예측민감수거적고위구역;기차,장요보호적수거화분성약간편수거,병이용인허의계산배경수궤착오위목표대매개편수거용여비빈;연후장용여편수거분산도불동허의궤상.VFRS방법능유효예측허의계산배경하적이상입침,병능교호지용인허의계산배경하적복잡성착오.대VFRS 방법실현적관건문제진행료상세적토론화분석.
With the emergence of multi-core processor,virtualization technology has attracted attention and developed rapidly in recent years.Virtual computing environment based on virtual machine becomes a hot topic in the field of network computing.Virtual computing environment is open,complex and dynamic,which has brought new challenges to system security,especially to intrusion tolerance.In this paper,VFRS method is proposed in order to protect sensitive data from intrusion in virtual computing environment.Firstly,a probability computing model is constructed to present system call sequences and the SCSFA algorithm is designed to predict the attempt of intrusion and to determine what need to protect,which is based on the analysis of system call sequence in virtual computing systems; Secondly,the sensitive data protected are divided into a number of film data,and for the goals of random errors tolerance,each tablet data are redundant backup based on Byzantine fault tolerance; Then,the redundant data are distributed to different virtual machines.VFRS method can predict the anomaly intrusion and well tolerate the complicated errors in virtual computing environment.The experimental results show that VFRS is effective and of high performance compared with related work.Some key issues of the VFRS method are also discussed and analyzed in detail.