CAJ | 학술논문

近年来随着云计算的迅速发展，其安全问题也成为当前研究的热点，但是大多数研究采用被动调用机制和较为固化的策略定义的可信计算思想，很难适应云环境复杂的信任关系和需求。文章提出一种基于主动可信计算思想的云环境虚拟机主动可信验证机制，通过主动监控机制，各组件独立运行，便于设置复杂的信任关系，也可以适应动态、分布式的云环境。该机制针对云环境中运营商和租户的信任关系，由用户和运营商的SLA协议来制定基准可信库，由可信第三方来为租户提供可信报告。与传统技术相比，该机制使租户对自身拥有的虚拟机安全可以查阅和验证，保证了云环境中虚拟机的可信。
근년래수착운계산적신속발전，기안전문제야성위당전연구적열점，단시대다수연구채용피동조용궤제화교위고화적책략정의적가신계산사상，흔난괄응운배경복잡적신임관계화수구。문장제출일충기우주동가신계산사상적운배경허의궤주동가신험증궤제，통과주동감공궤제，각조건독립운행，편우설치복잡적신임관계，야가이괄응동태、분포식적운배경。해궤제침대운배경중운영상화조호적신임관계，유용호화운영상적SLA협의래제정기준가신고，유가신제삼방래위조호제공가신보고。여전통기술상비，해궤제사조호대자신옹유적허의궤안전가이사열화험증，보증료운배경중허의궤적가신。
Recent years,cloud computing developed rapidly,and it’s security become the current research focus.But a lot of the researches about trusted computing are passive called by applications and use fixed format policies.It’s difficult to adapt the complicated relations.This paper presents a verify mechanism for virtual machines in cloud computing environment,this mechanism based on active trusted computing thought,through the acitive monitor,all components runs independently.It can works with complicated relations and adapt to dynamic distributed system.With this mechanism,users and facilitator make conifrm the standard trusted lib through SLA protocol,third-party veriifer provide report for users.Compared with conventional way,users can look up the report to know and ensured current security status of virtual machines in cloud computing environment.