Trusted Lightweight VMM Based Security Architecture

程戈,邹德清,李敏,季成

DOI: https://doi.org/10.3969/j.issn.1001-3695.2010.08.062

2010-01-01

Abstract:Virtualization technology is more and more popular in enhancing the security of the operating system. The previous solutions usually take the virtual machine moniter ( VMM) as the trusted computing base ( TCB) and provide a security func- tion by virtualization technology. However,those solutions have the following problems: a) Virtualization brings overhead which requires the users to bear the cost of virtualization when they don’t need high security environment. b) The general-purpose VMMs based solution cannot meet the users’( especially the client-side users) demand for the environmental diversity. c) The general-purpose VMMs are relatively large as a trusted computing base ( TCB) . This paper addressed the challenge to reduce the overhead of virtualization and established a dynamic chain of trust when used VMM to enhance the security of OS. This paper proposed a security architecture named Cherub which took a lightweight virtual machine moniter( LVMM) as the TCB. Cherub utilized the dynamic root of trust for measurement and hardware virtualization to insert a trusted LVMM under the commercial operating system,which could be the TCB to achieve various security goals. Implemented Cherub in Linux and the evaluation demonstrates that Cherub is effective and practical in security and performance perspectives.