虚拟化安全服务器研究与设计

随着服务器虚拟化技术的推广与发展,深圳供电局开始引入虚拟化应用来提高硬件资源使用率,虚拟化技术在给深圳供电局带来便利的同时也暴露一些安全问题,例如出现针对虚拟化操作系统的新型攻击,在虚拟环境下无法有效实现访问控制、流量检测及安全审计等隐患。通过对虚拟化环境基础架构及虚拟化环境信息安全整体防护的探讨,提出一套适用于深圳供电局的虚拟化安全服务器解决方案。     

Extensive Study of Cloud Computing Technologies,Threats and Solutions Prospective

Infrastructure as a Service (IaaS) provides logical separation between data, network, applications and machines from the physical constrains of real machines. IaaS is one of the basis of cloud virtualization. Recently, security issues are also gradually emerging with virtualization of cloud computing. Different security aspects of cloud virtualization will be explored in this research paper, security recognizing potential threats or attacks that exploit these vulnerabilities, and what security measures are used to alleviate such threats. In addition, a discussion of general security requirements and the existing security schemes is also provided. As shown in this paper, different components of virtualization environment are targets to various attacks that in turn leads to security issues compromising the whole cloud infrastructure. In this paper an overview of various cloud security aspects is also provided. Different attack scenarios of virtualization environments and security solutions to cater these attacks have been discussed in the paper. We then proceed to discuss API security concerns, data security, hijacking of user account and other security concerns. The aforementioned discussions can be used in the future to propose assessment criteria, which could be useful in analyzing the efficiency of security solutions of virtualization environment in the face of various virtual environment attacks.     

虚拟化系统安全的研究与分析

虚拟化技术是目前云计算最为重要的支撑技术,云计算系统的运行需要在虚拟化环境中的存储、计算及网络安全等资源的支持。利用虚拟化技术可以提升系统组织能力、降低系统代价、提升硬件资源应用效率和利用率,而由于虚拟化技术本身引入的云计算系统安全问题也值得重视。文章从虚拟机访问控制、安全度量、动态监测等方面进行了系统的分析,以期提升云计算系统的安全水平。     

网络对抗训练混合虚拟化平台设计研究

讨论了虚拟化技术实现原理及其在网络对抗教学中的应用上,分析了各类虚拟化技术的优缺点和构建网络对抗训练环境存在的问题。提出了一种混合虚拟化平台设计,该平台利用Libvirt虚拟化的应用程序编程接口（API）调用两种虚拟化技术同时运行在同一物理主机上。并详细叙述了混合虚拟化平台的实现过程和方法,并在多个虚拟机内同时运行测试基准,分析其可扩展性。多种虚拟化技术在同一物理机上的混合,实现了复杂实验环境的创建,对构建大规模的网络实验平台具有一定的参考价值。     

构建虚拟化系统安全的研究与分析

虚拟化技术是目前云计算最为重要的技术支撑,需要整个虚拟化环境中的存储、计算及网络安全等资源的支持。而虚拟化技术在系统组织、降低系统代价、改进硬件资源的效率、利用率以及灵活方面扮演着主要的角色。然而,虚拟化技术本身也会引入新的系统安全问题。但是,由于虚拟化技术带来的资源分割独立的优势,它在构建虚拟化系统安全过程中,扮演着重要的角色。本文主要进行虚拟化系统安全问题的研究与分析。     

一种基于集群环境的虚拟存储系统研究与实现

虚拟存储管理系统能够根据用户的需要随时在线调整存储卷的容量，而且能够提供快照、在线数据备份等功能，成为存储系统中重要的功能中间件．然而传统的服务器存储管理系统不能适应集群环境下的数据管理，尤其是随着SANs（Storage Area Networks）技术的日益发展与普及，研究集群环境下的虚拟存储系统成为迫切任务．本文通过对虚拟存储技术的研究，提出了集群环境下虚拟存储系统的模型CVM．分析了其中的关键技术．并且给出了一个具体的实现方案和测试结果，结果表明，CVM系统能够有效实现共享存储环境下的虚拟存储管理．同时提供了在线数据备份、数据镜像等功能，具有很好的容错特性，较好实现了集群环境下的共享存储管理．     

RDMA虚拟化相关技术研究

RDMA网络具有高带宽,低延时,低CPU负载的特点,广泛应用于数据密集型任务中,例如深度学习,高性能计算,数据分析等.RDMA的实现需要软硬件支持,在云环境下,RDMA虚拟化方案有助于多用户共享RDMA网络传输的高性能,同时实现对RDMA网络的统一管理和控制.本文调研了近年来的RDMA虚拟化解决方案,覆盖了虚拟机和容器环境;然后将这些解决方案进行分类和比较;最后,对RDMA虚拟化中存在的问题和未来的发展做出了总结和展望.     

网卡虚拟化综述

近年来,越来越多的应用或微服务部署到云端.虚拟网络是云端部署运行的基本保障.为了构建面向虚拟机和容器等虚拟实例的虚拟网络,网卡虚拟化在物理网卡的基础上,构建虚拟网卡和虚拟网桥等设备,并对各虚拟设备进行配置和管理.本文从虚拟网卡和虚拟网桥出发,调研了网卡虚拟化中目前流行的虚拟技术,并将这些技术进行了分类和比较,最后就网卡虚拟化的现状及未来进行了总结和展望.     

企业虚拟化环境中的安全防护

以VMwe虚拟化环境为背景,简要分析了先进虚拟化安全防护所面临的挑战,并对主流的虚拟化安全防护产品做了逐一介绍,为企业虚拟化环境的安全防护提供有效参考与合理建议.     

桌面虚拟化应用中虚拟环境评估与规划的研究

为实现完全桌面虚拟化技术,需要重点解决集中管理带来的诸多风险和压力问题。在实施桌面虚拟化之前,重点在六个方面对桌面虚拟化环境进行详细有效的评估和规划,最终可以采取有效的策略来部署桌面虚拟化。     

Architectural virtualization extensions: A systems perspective

Owing to the increase in demand for virtualization in recent years, both Intel and AMD have added virtualization extensions to the Intel 64 architecture. These architectural extensions provide hardware support aimed at improving the performance of system virtual machines (VM). Although extensive studies on various aspects of system VMs, in particular Xen but also KVM, have been reported in the literature, there has been no work specifically focused on Intel’s virtualization extensions. The survey presented here is a comprehensive study of the Intel 64 architecture’s architectural virtualization extensions and their use in system virtual machines, as exemplified by KVM. We describe a novel evaluation environment used in this study. Using this environment, we show and explain the correlation between architectural limitations of the hardware extensions and the performance of virtualization. The present review also describes the implementation and performance of a Virtio block device.     

Mercury: Combining Performance with Dependability Using Self-Virtualization

Virtualization has recently gained popularity largely due to its promise in increasing utilization,improving availability and enhancing security.Very often,the role of computer systems needs to change ...     

Research on services encapsulation and virtualization access model of machine for cloud manufacturing

Considering the new requirements of the services encapsulation and virtualization access of manufacturing resources for cloud manufacturing (CMfg), this paper presents a services encapsulation and virtualization access model for manufacturing machine by combining the Internet of Things techniques and cloud computing. Based on this model, some key enabling technologies, such as configuration of sensors, active sensing of real-time manufacturing information, services encapsulation, registration and publishing method are designed. By implementing the proposed services encapsulation and virtualization access model to manufacturing machine, the capability of the machine could be actively perceived, the production process is transparent and can be timely visited, and the virtualized machine could be accessed to CMfg platform through a loose coupling, ‘plug and play’ manner. The proposed model and methods will provide the real-time, accurate, value-added and useful manufacturing information for optimal configuration and scheduling of large-scale manufacturing resources in a CMfg environment.     

New Approach to Virtualization Is a Lightweight

Virtualization is a hot topic in the technology world. The technology enables a single computer to run multiple operating systems simultaneously. It lets companies use a single server for multiple tasks that would normally have to run on multiple servers, each running a different OS. Now, vendors are releasing products based on two lightweight virtualization approaches that also let a single operating system run several instances of the same OS or different OSs. However, today's new virtualization approaches do not try to emulate an entire hardware environment, as traditional virtualization does. They thus require fewer CPU and memory resources, which is why the technology is called "lightweight" virtualization. However, lightweight virtualization still faces several barriers to widespread adoption     

桌面虚拟化在高校实训机房应用探讨

文章从高校实训机房应用中现存的主要问题出发,介绍了桌面虚拟化技术的基本概念。并在此基础上以VMware View 4桌面虚拟产品为例,介绍了桌面虚拟化环境的搭建,以及在高校实训机房中应用桌面虚拟化的优势。     

云计算虚拟化与SAN存储大集中集成研究

云计算的兴起,虚拟化技术得到了空前的发展,但虚拟化技术性能和安全性有一定的局限性,本论文提出了应用虚拟化与SAN存储大集中集成应用。通过对虚拟化和SAN存储大集中全面分析与研究,以现有的国内外主流的应用虚拟化、SAN存储大集中的分析为基础,重点剖析了在云计算环境下应用虚拟化与SAN存储大集中的主流技术与解决方案,并指出集成应用的未来的发展趋势,最终阐述了为什么应用虚拟化与SAN存储大集中集成应用才是解决之道。     

基于Xen的Qubes操作系统技术架构及安全性能分析简

伴随着大数据和云时代的到来,虚拟化技术的应用已经越来越成熟。如何运用虚拟化技术给终端客户提供一个安全稳定高效的桌面环境,成为了一个日益热门的话题。Qubes系统利用新一代的硬件技术和虚拟化技术实现物理宿主机的隔离能力,从系统层面对木马病毒和恶意代码进行了防范和遏制,一定程度上解决了系统安全领域的木桶问题。此外,应用虚拟化技术提高安全性能的同时还可能带来那些问题和隐患,也应该引起我们足够的重视。     

涉密环境桌面虚拟化多级安全系统设计与实现

为解决涉密环境对于桌面虚拟化的多级安全防护需求,文章提出了一种面向涉密环境的桌面虚拟化多级安全模型--vDesktop-BLP模型。该模型结合桌面虚拟化应用场景,对经典BLP多级安全模型进行了改进,实现了对涉密环境桌面虚拟化系统中信息流流向的多级安全控制。文章还对模型进行了系统实现,对其中的安全机制进行了详细设计,最终保证虚拟桌面间最主要的两类信息交互行为（网络通信行为和存储设备读写行为）能够符合涉密信息系统多级安全的要求。     

虚拟化技术在实验教学中的应用

介绍虚拟化技术的优势,以VMware Workstation的应用为例,阐述构建虚拟网络的几种模式;通过实验教学中的典型案例,指出采用虚拟化技术构建实验教学环境,可增加学生动手练习的机会,方便教师演示实验教学内容,大大增进教学效果,提高机房的利用率。     

性能虚拟化存储系统的设计与实现

针对集中共享存储环境中不同应用间的性能隔离和性能保证问题,在容量虚拟化管理的基础上提出一种性能虚拟化管理机制,实现同时支持容量和性能虚拟化管理的虚拟存储系统。该系统采用扩展了接纳管理和空闲资源公平分配机制的比例带宽资源分配算法,实现虚拟磁盘间的性能虚拟化,避免多个虚拟磁盘间的性能干扰。