TRainbow: a new trusted virtual machine based platform
Yuzhong Sun,Haifeng Fang,Ying Song,Lei Du,Kai Zhang,Hongyong Zang,Yaqiong Li,Yajun Yang,Ran Ao,Yongbing Huang,Yunwei Gao
DOI: https://doi.org/10.1007/s11704-009-0076-5
2010-01-01
Frontiers of Computer Science in China
Abstract:Currently, with the evolution of virtualization technology, cloud computing mode has become more and more popular. However, people still concern the issues of the runtime integrity and data security of cloud computing platform, as well as the service efficiency on such computing platform. At the same time, according to our knowledge, the design theory of the trusted virtual computing environment and its core system software for such network-based computing platform is at the exploratory stage. In this paper, we believe that efficiency and isolation are the two key proprieties of the trusted virtual computing environment. To guarantee these two proprieties, based on the design principle of splitting, customizing, reconstructing, and isolation-based enhancing to the platform, we introduce TRainbow, a novel trusted virtual computing platform developing by our research group.With the two creative mechanisms, that is, capacity flowing amongst VMs and VM-based kernel reconstructing, TRainbow provides great improvements (up to 42%) in service performance and isolated reliable computing environment for Internet-oriented, large-scale, concurrent services.