基于虚拟安全域的多级安全访问控制

Multi-level Security Access Control Based on Virtual Security Domain

摘要:

虚拟化技术作为云计算的核心技术,相对于传统技术具有节约开销、易于管理、灵活制定等优势,成为业界应用的热点技术。文章研究了传统的 BLP多级安全模型,并改进了该模型应用于虚拟化系统访问控制,结合虚拟安全域的概念,设计实现了虚拟化系统访问控制模型,主要结合分级分域原则对虚拟机之间的通信控制和虚拟机对虚拟磁盘的访问控制进行约束。

Abstract:

Virtualization technology as the core technology of the cloud computing technology, compared to traditional tech.nology with cost saving, easy management, flexible development and other advantages, becomes the hot technology in theindustry application. In this paper, the traditional BLP multilevel security mode wsa studied, and the application of themodel to the virtualized system access control was improved, combined with the concept of virtual security domain, the vir.tual control system was designed and implemented, and the communication control between the virtual machines and theaccess control of the virtual machine to the virtual disk were mainly combined with the hierarchical classification principle.