Information Transfer Model of Virtual Machine Based on Storage Covert Channel

摘要：

　　Aiming at the problem that virtual machine information cannot be extracted incompletely, we extend the typical informa tion extraction model of virtual machine and propose a perception mechanism in virtualization system based on storage covert chan nel to overcome the affection of the semantic gap.Taking advan tage of undetectability of the covert channel, a secure channel is established between Guest and virtual machine monitor to pass data directly.The Guest machine can pass the control information of malicious process to virtual machine monitor by using the VMCALL instruction and shared memory.By parsing critical information in process control structure, virtual machine monitor can terminate the malicious processes.The test results show that the proposed mechanism can clear the user-level malicious pro grams in the virtual machine effectively and covertly.Meanwhile,its performance overhead is about the same as that of other main stream monitoring mode.

关键词： virtualization safety protection information extraction of virtual machine covert channel process control structure

作者: WANG Xiaorui WANG Qingxian GUO Yudong LU Jianping

作者单位: Fourth Department,PLA Information Engineering University,Zhengzhou 450002,Henan,China State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450002,Henan,China Department of Communication Command,Chongqing Communication Institute,Chongqing 400035,China

会议类型: 国内会议

会议名称: 第七届中国可信计算与信息安全学术会议

会议地点: 秦皇岛

会议语种:英文

页码: 377-384

在线出版日期: 2013-09-01（万方平台首次上网日期，不代表论文的发表时间）