基于虚拟化的系统安全增强和显卡透传研究.docVIP

基于虚拟化的系统安全增强及显卡透传研究 目录 2概述 4 3操作系统安全增强模型 5 4KVM虚拟机 7 5直接地址映射技术 8 5.1基本原理 8 5.2实现方式 9 6显卡直接分配 10 6.1显卡在KVM虚拟机中的注册 11 6.2显卡专用总线的注册 12 6.3显卡资源直接映射 12 6.3.1历史遗留资源映射 12 6.3.2显卡资源映射 13 6.4卡的PCI配置空间 14 6.5VGA BIOS 15 6.6DMA映射 15 7小结 15 摘要：本文着重于探讨系统虚拟化技术在终端安全领域的应用前景以及在推广应用中所面临的显卡性能问题的解决办法。针对个人终端操作系统安全问题，提出了一种基于系统虚拟化技术的操作系统安全增强模型，并基于KVM虚拟机深入研究了提高该模型下虚拟机显示性能的显卡透传技术的具体实现。实验结果证明显卡透传技术能够突破虚拟机客户操作系统的显示性能瓶颈问题，使得客户机操作系统能够像真实操作系统一样满足图形显示与处理应用，对虚拟技术在终端安全领域的发展拓展了更广阔的空间。 关键词：系统虚拟化技术；系统安全增强；KVM虚拟机；显卡透传；直接地址映射 The Research on Virtualization-Based System Security Enhancements and Graphics Card Pass-Through HOU Jian-Ning1,DONG Gui-Shan2,WANG Yin3,SHEN Ya4 (1.No.30 Institute of China Electronics Tecnology Group Corporation,Chendu,Sichuan 610041,China; 2. No.30 Institute of China Electronics Tecnology Group Corporation,Chendu,Sichuan 610041,China; 3.No.30 Institute of China Electronics Tecnology Group Corporation,Chendu,Sichuan 610041,China; 4.Westone Information Industry Inc.Chendu,Sichuan 610051,China) Abstract: This paper focuses on the prospect of system virtualization technology which applications in the terminal security field, and investigate the solution of the graphics performance problem when people promote the technology. For security issues of personal terminal operating system, this paper propose a security Enhancements model based on the system virtualization technology on operating system, and in-depth study implementation of graphics Card pass-through technology to improve virtual machine performance based on this model on KVM virtual machine. Experimental results show that graphics Card pass-through technology can breakthrough display performance bottlenecks of the virtual machine client operating system. This technology can make client operating system meet the graphics and processing applications as a real operating system, and can expand more space for development of terminal security field. Key Words:System virtualization technology ;System Security Enhancements;