一种基于虚拟机的驱动程序加固技术

近年来设备驱动程序可靠性技术已成为操作系统领域的研究热点。本文首先分析了驱动程序可靠性研究现状,介绍了虚拟机监控器技术;然后结合虚拟机技术,提出了一个新的驱动加固框架VHarden,重点研究了驱动域之间的数据传输和隔离保护机制,并基于开源的Xen虚拟机监控器和Linux操作系统,设计和实现了该原型系统;最后采用基于软件的故障注入工具对该原型系统进行了评测。测试结果表明,VHarden驱动加固结构可有效提高Linux操作系统的可用性。

Research of Device Driver Hardening Based on the Virtual Machine Technology

To improve the reliability and robustness of commodity operating systems, it is very important to improve the reliability of the device drivers in operating systems. Currently, the research of improving the reliability of device drivers focuses on the efficient isolation of the device driver and the operating system kernel. We first design a new device driver framework VHarden based on the virtual machine technology, and then focus on a data transfer mechanism and the domain protection techniques. We implement the VHarden prototype using Xen and Linux. Finally, we use fault injection tools to test it. The results show that the VHarden framework is useful in improving the reliability of commodity operating systems.