基于XEN虚拟监控器的安全访问控制技术研究-计算机技术专业论文.docxVIP

上海交通大学工程硕士学位论文 上海交通大学工程硕士学位论文 符号说明 II II The Security Access Control of XEN Hypervisor ABSTRACT With the growing of computer science, upgrading of the operating system, the security of network and information have become more and more important. Thus, the security issues face with great challenges. Based on XEN hypervisor, we study deeply with its SeHyper module. And combine with relevant characteristic, we analyze the structure of the security control module. The main works of the paper are as following: First of all, we introduce the status of virtualization technology, list the three major Hypervisor modules, analyze the key features of the virtualization technology, point out the security risks in the Hypervisor, and list the prevalence security control module. Secondly, based on the XEN, we deeply study its SeHyper. Analyze how to add security control when virtual machine access the relevant resource. And make clear with the processes of SeHyper security control mechanism and the dependency between security hooks, security policy manager and policy decision manager. Finally, we setup the experiment environment, make the test cases and analyze the test results. It turns out to be that SeHyper make a little slowdown to system performance. But the benchmark can be acceptable. And the SeHyper can improve a little efficiency for the system cache. KEY WORDS: XEN, SeHyper, Access Control III III 符号说明 Abbreviations 缩略语 Full spelling 英文全名 Chinese explanation 中文解释 ACM Access Control Module 存取控制模块 CISC Complex Instruction Set Computer 复杂指令集架构 CW Chinese GreatWall 中国长城策略 DAC Discretionary Access Control 任意访问控制 HMC Hardware Management Console 硬件管理控制台 ISA Instruction Set Architecture 指令集架构 MAC Mandatory Ac