毕业论文-虚拟机中应用程序代码段完整性度量.docx

虚拟机中应用程序代码段完整性度量 摘 要 随着网络技术的发展，基于互联网的应用已经渗透到各个领域。由于虚拟化技术具有节约硬件资源等优点，许多实际应用都采用了虚拟化技术。然而现有的完整性度量技术多是针对操作系统来实现，缺乏对操作系统之上的应用程序的度量。 本文深入研究了现有的完整性度量机制，借助可信计算组织推出的可信平台模块（TPM），设计和实现了一种针对虚拟机中应用程序运行时代码段的完整性度量框架，做到了动态度量应用程序代码段信息。 本文主要的工作和取得的成果包括： 研究了现有的完整性度量方法，提出了一种针对应用程序代码段的完整性度量架构，并引入虚拟化技术，在程序运行后对其代码段信息进行获取，动态度量其完整性。 研究操作系统对应用程序在内存中的管理，利用 Linux 可加载模块实现对指定应用程序代码段信息的获取。 利用 TPM-Emulator，在 Linux 下搭建了可信计算平台环境，并使用 C 语言对度量框架的相关功能进行实现。 最后，通过实验测试程序的运行效果，对度量程序运行的正确性进行验证， 基本实现了度量代码段完整性的要求。 关键词： 可信计算，完整性度量，虚拟化 The Integrity Measurement of the Text Segments about an Application running on a Virtual Machine Abstract With the development of network technology, applications based on the Internet have been widely used in every field. Many practical applications like to use it, because the technology of virtualization has many advantages, such as saving the resources of hardware. However, the existing technologies of integrity measurement are designed for operating system, and lack measurement about the applications. In this paper, I deeply studied the measurement of integrity. And with the help of Trusted Platform Module (TPM) proposed by the trusted computing group (TCG), the architecture of integrity measurement focuses on the text segments of an application was designed and accomplished when it’s running in the virtual machine. And it can measure the text segments’ information of an application dynamically. The main research work and results include: Study the methods of integrity measurement, and come up with a architecture of integrity measurement focuses on the text segments of an application. Involved the technology of virtualization, the text segments’ information is got when it’s running, and its integrity is dynamically measured. Study how the operating system manages the memory of an application, and use the Linux Kernel Module to get the text segments’ information. The TPM-Emulator is used to build the trusted platform environment in Linux, and accomplish relative functions of t