Virtinspector: Design and implementation of a virtual machine dynamic security Metric framework based on UEFI

Virtinspector: Design and implementation of a virtual machine dynamic security Metric framework based on UEFI

Shi Shi Xiang Li Zhihua Wang Yu Zhang Qi

Through trusted hardware, it can make up the deficiency of software security and improve the security of cloud system as a whole. However, in the face of the security of cloud environment, traditional trusted hardware technology can not provide enough protection. In this paper, a dynamic security framework of virtual machine based on UEFI is proposed--virtinspector. The framework can make the UEFI firmware as the trusted foundation, carry on the real-time, the dynamic security measure to the cloud system infrastructure layer, and provide the dynamic protection which the traditional trusted technology cannot achieve. On the basis of this framework, a UEFI virtual machine dynamic Security Measurement prototype system is built with a domestic server as the experimental platform and a cloud environment. Experiments and analysis show that the framework can effectively detect attacks on virtual domain, management domain and virtualization software, and provide security support for cloud system from infrastructure layer. And the performance of the original system loss within the allowable range, does not affect the normal use of users.

Virtinspector: Design and implementation of a virtual machine dynamic security Metric framework based on UEFI