Hyper_V微内核架构安全性分析.pdfVIP

32 15 武 汉 理 工 大 学 学 报 Vol. 32 No. 15 2010 8 JOURNAL OF WUHAN UNIVERSITY OF TECHNOLOGY Aug. 20 10 DOI: 10. 3963/ j. issn. 20 10. 15. 031 HyperV 孙永清, 林九川, 钱 伟, 金 波 ( , , 201204) : 寄居架构和裸金属架构是虚拟机软件常采用的两种技术模式, 其中裸金属模式虚拟机又分为微内 和单内 两种技术架构, 与单内 架构相比, 微内 具有更高的安全性, H perV 采用的是微内 架构在对微内 架构技术详 细研究的基础上, 分析了H perV 微内 架构的技术特点, 以及在安全性上与其他架构相比所使用的独特的安全技术 : 微内 ; 系统管理程序; 虚拟化; 安全防御体系 : TP 393 : A : 2010) 150 13003 HyperV Micro Kernel Architect re Sec rity Analysis S UN Yongqi ng , L IN J iuch uan, QIA N Wei, JIN Bo ( Ke Laborator of Information Netw ork Securit of Ministr of Public Securit , The Third Research Institute of Ministr of Public Securit , Shanghai 210204, China) Abstract: Virtual machine adopts two technical architectures, host architecture and bare metal architecture. And the latter one also includes two kinds of t echnical architectures, microkernel and monolithic kernel. Microkernel has higher securit com pared w ith monolit hic. H perV is the microkernel. Based on the detailed comparison between the two t pes of virtual machine technolog architectures, this paper anal ses the securit of H perV microkernel architecture and unique securit technical fea tures compared w ith other architectures. Key words: microkernel; h pervisor; visualization; securit defense s stem [ 1] , 20 60 , , H pervisor( ) , , [ 2] , , h pervisor , , 1 H perV H perV , h pervisor, [3] , , : : 863 ( 2008AA01Z4 12) . : ( 1976) , , , . Email: ong