CAJ | 학술논문

如何扩展传统信任链中的信任传递关系,构建一个可信虚拟化环境,从而保证虚拟域内软件的可信,是可信计算应用到云计算中去的一个关键.该文结合虚拟化技术的特点,提出了一种适用于虚拟化环境的并行信任结构,实现了将信任从虚拟化平台的信任根传递到虚拟域内的应用软件,该信任结构通过在虚拟监控器中加载一个可信软件保护代理模块,有效的减小了信任中间节点的复杂程度,提高了系统的可控性和安全性.本文还在该结构的基础上设计了一种虚拟机域内高可信软件保护模型,并进行了部分系统实现.
여하확전전통신임련중적신임전체관계,구건일개가신허의화배경,종이보증허의역내연건적가신,시가신계산응용도운계산중거적일개관건.해문결합허의화기술적특점,제출료일충괄용우허의화배경적병행신임결구,실현료장신임종허의화평태적신임근전체도허의역내적응용연건,해신임결구통과재허의감공기중가재일개가신연건보호대리모괴,유효적감소료신임중간절점적복잡정도,제고료계통적가공성화안전성.본문환재해결구적기출상설계료일충허의궤역내고가신연건보호모형,병진행료부분계통실현.
A parallel trust structure is proposed to contain application software into its credence coverage. The structure passes trust from the TPM to the applications in virtual domains. Based on this structure, we design and implement a trusted software protection agent (TSPA), a module in hypervisor, which simplifies the trust complexity and makes trust transfer more controllable and more secure. This paper also contributes a model for protecting software integrity.