Abstract:In the cloud environment, the virtual computing node has become the dominant form of cloud services used by users. Hence, it is increasingly critical to guarantee the trusted operation of the virtual computing node's operating system (VCNOS). However, previous schemes suffer a lot, such as insufficient consideration of the comprehensive of the measured objects, ignoring the dynamic of trusted, and the trusted measurement mechanisms rarely consider their security. Thus, a three-dimensional dynamic trusted measurement model SABDTM, which integrates the integrity measurement of kernel static data, trusted evaluation of operating system behavior (OSB), and the feedback trust of interacting nodes, is proposed. First, SABDTM divided OSB into multiple atomic behaviors and introduced the Bayesian decision theory to predict trusted expectations of OSBs. Second, the feedback trust of interacting nodes is considered to improve the comprehensiveness of the trusted measurement and evaluate its value based on the Euclidean distance function to reduce the impact of inaccurate feedback from malicious nodes. Subsequently, we set the appropriate weight for trusted measurement values of different moments based on Induced Ordered Weighted Averaging to accurately portray the actual state of VCNOS. Moreover, we designed a lightweight and independent subsystem to perform the trusted measurement, which guarantees the security of the measurement service. The security of our model is proved rigorously based on the non-interference theory. Finally, the experiments and comparative analysis demonstrated our model has better functionality and superiority.

KVM-Based Trusted Virtualization Architecture Model

Trusted Computing Base Using Virtualization Platform

Trust Model to Enhance Security and Interoperability of Cloud Environment

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

AMethod of Establishing a Virtual Trusted Pipeline Based on KVM Shared Memory

Hierarchal Security Architecture of Virtualized Trusted Platform

Trusted Terminal Design of Distributed Environment

Based on Trusted Computing User Security Model for Cloud Computing

Design and Implementation of SecPod, A Framework for Virtualization-Based Security Systems.

Multilateral Security Architecture for Virtualization Platform in Multi-Tenancy Cloud Environment

A Generalized Trusted Virtualized Platform Architecture

Trusted Computing Model Based on Server-End Storage

Towards Trust Proof for Secure Confidential Virtual Machines

SeVMM: VMM-Based Security Control Model

An XEN Platform Based Trusted Virtual Machine Migration Protocol

SABDTM: Security-first Architecture-Based Dynamic Trusted Measurement Scheme for Operating System of The Virtual Computing Node

A Novel Agent-Based Framework in Bridge-Mode Hypervisors of Cloud Security.

One-Way Isolation Execution Model Based on Hardware Virtualization

Explore Xen Security Mechanism

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

VIRTUALIZATION SECURITY: A GATEWAY TO SECURE CLOUD COMPUTING