CN104134038B - A kind of secure and trusted running protection method based on virtual platform - Google Patents
A kind of secure and trusted running protection method based on virtual platform Download PDFInfo
- Publication number
- CN104134038B CN104134038B CN201410371685.0A CN201410371685A CN104134038B CN 104134038 B CN104134038 B CN 104134038B CN 201410371685 A CN201410371685 A CN 201410371685A CN 104134038 B CN104134038 B CN 104134038B
- Authority
- CN
- China
- Prior art keywords
- virtual machine
- platform
- monitor
- guest
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 20
- 230000004224 protection Effects 0.000 title claims abstract description 10
- 238000004458 analytical method Methods 0.000 claims abstract description 29
- 238000005259 measurement Methods 0.000 claims abstract description 19
- 230000009471 action Effects 0.000 claims abstract description 15
- 108010028984 3-isopropylmalate dehydratase Proteins 0.000 claims abstract description 14
- 239000000203 mixture Substances 0.000 claims abstract description 7
- 230000003068 static effect Effects 0.000 claims abstract description 7
- 238000010200 validation analysis Methods 0.000 claims abstract description 7
- 238000002955 isolation Methods 0.000 claims description 25
- 238000012544 monitoring process Methods 0.000 claims description 12
- 230000008569 process Effects 0.000 claims description 9
- 238000013461 design Methods 0.000 claims description 6
- 238000011156 evaluation Methods 0.000 claims description 6
- 239000000284 extract Substances 0.000 claims description 5
- 238000005457 optimization Methods 0.000 claims description 5
- 230000000694 effects Effects 0.000 claims description 3
- 238000007689 inspection Methods 0.000 claims description 3
- 238000012360 testing method Methods 0.000 claims description 3
- 230000002547 anomalous effect Effects 0.000 claims description 2
- 238000005516 engineering process Methods 0.000 abstract description 9
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000004888 barrier function Effects 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
- 239000011800 void material Substances 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Debugging And Monitoring (AREA)
Abstract
Description
Claims (1)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410371685.0A CN104134038B (en) | 2014-07-31 | 2014-07-31 | A kind of secure and trusted running protection method based on virtual platform |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410371685.0A CN104134038B (en) | 2014-07-31 | 2014-07-31 | A kind of secure and trusted running protection method based on virtual platform |
Publications (2)
Publication Number | Publication Date |
---|---|
CN104134038A CN104134038A (en) | 2014-11-05 |
CN104134038B true CN104134038B (en) | 2016-11-23 |
Family
ID=51806713
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201410371685.0A Active CN104134038B (en) | 2014-07-31 | 2014-07-31 | A kind of secure and trusted running protection method based on virtual platform |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN104134038B (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106970823A (en) * | 2017-02-24 | 2017-07-21 | 上海交通大学 | Efficient secure virtual machine guard method and system based on nested virtualization |
Families Citing this family (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN105095768B (en) * | 2015-08-20 | 2018-03-02 | 浪潮电子信息产业股份有限公司 | Virtualization-based trusted server trust chain construction method |
CN105376237A (en) * | 2015-11-24 | 2016-03-02 | 华为技术有限公司 | Information control method, device and system |
EP3179690A1 (en) * | 2015-12-11 | 2017-06-14 | Gemalto Sa | Mobile device having trusted execution environment |
CN106789076B (en) * | 2016-12-28 | 2020-01-14 | Tcl集团股份有限公司 | Interaction method and device for server and intelligent equipment |
US10896253B2 (en) * | 2017-02-06 | 2021-01-19 | Huawei Technologies Co., Ltd. | Processor trace-based enforcement of control flow integrity of a computer system |
CN106909509B (en) * | 2017-03-01 | 2019-06-25 | 四川大学 | A kind of virtual machine process code without acting on behalf of paging type gauging system and method |
CN107147649A (en) * | 2017-05-11 | 2017-09-08 | 成都四象联创科技有限公司 | Data-optimized dispatching method based on cloud storage |
CN107493271A (en) * | 2017-07-28 | 2017-12-19 | 大唐高鸿信安(浙江)信息科技有限公司 | Credible and secure network system |
CN107633089A (en) * | 2017-09-29 | 2018-01-26 | 郑州云海信息技术有限公司 | A kind of newest credible dynamic acquisition methods based on credible management platform |
CN109670312A (en) * | 2017-10-13 | 2019-04-23 | 华为技术有限公司 | Method of controlling security and computer system |
CN108132828B (en) * | 2017-12-25 | 2021-06-29 | 浪潮(北京)电子信息产业有限公司 | Libvirt-based virtual mechanism building method, device and equipment |
CN113824683A (en) * | 2021-08-13 | 2021-12-21 | 中国光大银行股份有限公司 | Trusted domain establishing method and device and data system |
CN115964117A (en) * | 2021-10-12 | 2023-04-14 | 中兴通讯股份有限公司 | Credibility measuring method and device, computer equipment and readable medium |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101246537A (en) * | 2008-03-28 | 2008-08-20 | 兰雨晴 | Method for implementing reliable computation based on reliable multi-task operating system |
CN101866408A (en) * | 2010-06-30 | 2010-10-20 | 华中科技大学 | Transparent trust chain constructing system based on virtual machine architecture |
CN103368973A (en) * | 2013-07-25 | 2013-10-23 | 浪潮(北京)电子信息产业有限公司 | Safety system for cloud operating system |
-
2014
- 2014-07-31 CN CN201410371685.0A patent/CN104134038B/en active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101246537A (en) * | 2008-03-28 | 2008-08-20 | 兰雨晴 | Method for implementing reliable computation based on reliable multi-task operating system |
CN101866408A (en) * | 2010-06-30 | 2010-10-20 | 华中科技大学 | Transparent trust chain constructing system based on virtual machine architecture |
CN103368973A (en) * | 2013-07-25 | 2013-10-23 | 浪潮(北京)电子信息产业有限公司 | Safety system for cloud operating system |
Non-Patent Citations (2)
Title |
---|
Requirements for an integrity-protected hypervisor on the x86 hardware virtualized architecture[C]//International Conference on Trust and Trustworthy Computing;Vasudevan A等;《Springer Berlin Heidelberg》;20101231;全文 * |
虚拟机***安全综述;秦中元等;《计算机应用研究》;20120531;全文 * |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN106970823A (en) * | 2017-02-24 | 2017-07-21 | 上海交通大学 | Efficient secure virtual machine guard method and system based on nested virtualization |
CN106970823B (en) * | 2017-02-24 | 2021-02-12 | 上海交通大学 | Efficient nested virtualization-based virtual machine security protection method and system |
Also Published As
Publication number | Publication date |
---|---|
CN104134038A (en) | 2014-11-05 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN104134038B (en) | A kind of secure and trusted running protection method based on virtual platform | |
Wolf et al. | Safety and security in cyber-physical systems and internet-of-things systems | |
CN103577748B (en) | Dynamic measuring method based on dependable computing and management system | |
Wang et al. | Numchecker: Detecting kernel control-flow modifying rootkits by using hardware performance counters | |
Collberg et al. | Distributed application tamper detection via continuous software updates | |
Wang et al. | Malicious firmware detection with hardware performance counters | |
Ho et al. | PREC: practical root exploit containment for android devices | |
JP2008547070A (en) | Method and system for repairing applications | |
Cheng et al. | Checking is believing: Event-aware program anomaly detection in cyber-physical systems | |
Kannavara et al. | Challenges and opportunities with concolic testing | |
CN109074448A (en) | The detection of the deviation of the safe condition and load rated safety state of computing device | |
CN105205391B (en) | A kind of clean room method for real-time monitoring based on integrity verification | |
Tan et al. | Detecting kernel refcount bugs with {Two-Dimensional} consistency checking | |
Konstantinou et al. | Hpc-based malware detectors actually work: Transition to practice after a decade of research | |
Song | Analysis of risks for virtualization technology | |
Ismail et al. | Design and implementation of an efficient framework for behaviour attestation using n-call slides | |
Estrada et al. | Dynamic vm dependability monitoring using hypervisor probes | |
Papazis et al. | Detecting indicators of deception in emulated monitoring systems | |
Yu et al. | Using hardware performance counters to detect control hijacking attacks | |
Nath et al. | ArtiFact: Architecture and CAD flow for efficient formal verification of SoC security policies | |
Reeves et al. | Lightweight intrusion detection for resource-constrained embedded control systems | |
Zhu et al. | Jintide: Utilizing low-cost reconfigurable external monitors to substantially enhance hardware security of large-scale CPU clusters | |
Thevenon et al. | iMRC: Integrated Monitoring & Recovery Component, a Solution to Guarantee the Security of Embedded Systems. | |
Shropshire | Securing cloud infrastructure: unobtrusive techniques for detecting hypervisor compromise | |
KR102183649B1 (en) | Apparatus for verifying kernel integrity and method therefor |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right |
Effective date of registration: 20180816 Address after: 250101 S06 tower, 1036, Chao Lu Road, hi tech Zone, Ji'nan, Shandong. Patentee after: SHANDONG LANGCHAO YUNTOU INFORMATION TECHNOLOGY Co.,Ltd. Address before: No. 1036, Shun Ya Road, Ji'nan high tech Zone, Shandong Province Patentee before: INSPUR ELECTRONIC INFORMATION INDUSTRY Co.,Ltd. |
|
TR01 | Transfer of patent right | ||
CP03 | Change of name, title or address |
Address after: 250100 No. 1036 Tidal Road, Jinan High-tech Zone, Shandong Province, S01 Building, Tidal Science Park Patentee after: Inspur cloud Information Technology Co.,Ltd. Address before: 250101 S06 tower, 1036, Chao Lu Road, hi tech Zone, Ji'nan, Shandong. Patentee before: SHANDONG LANGCHAO YUNTOU INFORMATION TECHNOLOGY Co.,Ltd. |
|
CP03 | Change of name, title or address | ||
TR01 | Transfer of patent right |
Effective date of registration: 20221013 Address after: No. 5-398, Yunhan Avenue, Shuitu Hi tech Industrial Park, Beibei District, Chongqing 400722 Patentee after: Chongqing Inspur Government Cloud Management and Operation Co.,Ltd. Address before: 250100 No. 1036 Tidal Road, Jinan High-tech Zone, Shandong Province, S01 Building, Tidal Science Park Patentee before: Inspur cloud Information Technology Co.,Ltd. |
|
TR01 | Transfer of patent right |