Name
Abstract | ||
|---|---|---|
Infrastructure-as-a-service(IaaS) cloud provides the user the ability to use the computing resource of the cloud provider through renting a virtual machine(VM). At the same time it becomes an essential requirement for the user to verify the integrity of his VM. In this paper we designed and implemented TCG(trusted computing group)-based remote attestation for the Xen VM under the assumption that the trusted platform module(TPM) and hyper visor are secure and the privileged domain0 may be malicious. Firstly we realized load-time integrity measurement of the guest OS(operating system) kernel in the hyper visor directly and built the trust chain that is independent of the domain0. Secondly we realized the virtualized AIK(attestation identity key) and PCR(platform configuration register) that simulated the security functions of TPM AIK and PCR and supported VM migration, save and restore operations. Finally through the prototype implementation it is shown that the code complexity and the performance overhead are acceptable for the real system. |
Year | DOI | Venue |
|---|---|---|
2011 | 10.1109/CloudCom.2011.37 | CloudCom |
Keywords | Field | DocType |
cloud provider,hyper visor,virtual machine,xen vm,tpm aik,vm migration,platform configuration register,platform module,attestation identity key,load-time integrity measurement,computing resource,hardware,infrastructure as a service,virtual machines,kernel,trusted computing,trusted platform module,operating system,security,virtual machine monitor,cloud computing | Kernel (linear algebra),Virtual machine,Trusted Computing,Computer science,Cyclomatic complexity,Hypervisor,Trusted Platform Module,Real-time computing,Integrity measurement,Operating system,Embedded system,Cloud computing | Conference |
Citations | PageRank | References |
7 | 0.53 | 11 |
Authors | ||
3 | ||