CAJ | 학술논문

　　虚拟化技术作为云计算的基础架构，其安全性随着云计算的发展越来越受到人们的关注。提出一种针对虚拟机系统内核攻击的入侵检测方案，借助Xen提供的虚拟化平台，来获取虚拟机系统内核运行情况，从而达到监视和防止内核被攻击的目的。该方案可以有效地防御来自动态修改内核代码和内核不变数据结构一类的攻击。
　　허의화기술작위운계산적기출가구，기안전성수착운계산적발전월래월수도인문적관주。제출일충침대허의궤계통내핵공격적입침검측방안，차조Xen제공적허의화평태，래획취허의궤계통내핵운행정황，종이체도감시화방지내핵피공격적목적。해방안가이유효지방어래자동태수개내핵대마화내핵불변수거결구일류적공격。
As the foundation of cloud computing, virtualization technology’s security problems are gained more and more attention of the specialists with the development of cloud computing. This paper presents a virtual machine system kernel intrusion detection system, which use the introspection technology provided by Xen hypervisor to get internal states of kernel of the virtual machine. To achieve the goal of monitoring the kernel and preventing it from being compromised. This system can effectively defend the case of attack that dynamically modifies the kernel code and kernel unchanged data structure.