计算机应用 ›› 2014, Vol. 34 ›› Issue (2): 477-480.

• 计算机安全 • 上一篇    下一篇

基于QEMU的Xen文件系统加解密设计

谌腾,何钦   

  1. 电子科技大学 电子科学技术研究院,成都 611731
  • 收稿日期:2013-08-02 修回日期:2013-10-11 出版日期:2014-02-01 发布日期:2014-03-01
  • 通讯作者: 谌腾
  • 作者简介:谌腾(1987-),男,四川眉山人,硕士研究生,主要研究方向:信息系统安全;何钦(1987-),男,广西柳州人,硕士研究生,主要研究方向:信息系统安全。
  • 基金资助:
    互联网公众舆论安全监测系统的研制与应用

Design of file system encryption and decryption for Xen based on QEMU

CHEN Teng,HE Qin   

  1. Research Institute Electronic Science and Technology, University of Electronic Science and Technology of China, Chengdu Sichuan 611731, China
  • Received:2013-08-02 Revised:2013-10-11 Online:2014-02-01 Published:2014-03-01
  • Contact: CHEN Teng

摘要: 针对Xen虚拟机磁盘镜像文件以明文方式存储的问题,提出了一种Xen镜像文件实时加解密方案。采用了透明加解密方法,在Xen的模拟处理器QEMU(Quick EMUlator)中加入了加解密模块,对虚拟机磁盘镜像进行了实时加解密,解决了Xen虚拟机用户的磁盘数据安全威胁问题。通过对比测试未加密和加密的虚拟机,验证了该方法的有效性和性能可靠性。

关键词: Xen, 虚拟化安全, 磁盘加解密, QEMU

Abstract: Concerning the storage of the Xen disk image as plain text, the paper proposed a real-time encryption and decryption method for the disk image of Xen. Using the transparent encryption and decryption method, and inserting the transparent encryption and decryption module into the QEMU of Xen, this method encrypted and decrypted the disk image of virtual machine and solved the problem of the security threat to the virtual machine disk data of the Xen's users. Through the contrast test for the encrypted and unencrypted virtual machine, the effectiveness and performance reliability of the method were verified.

Key words: Xen, virtualization security, disk encryption, QEMU

中图分类号: