论文部分内容阅读
针对基础设施即服务(IaaS)云平台中多租户间可能存在的数据隔离及共享需求,提出了一套形式化的访问控制模型——MTIAC(多租户IaaS访问控制)模型.MTIAC针对IaaS云平台的虚拟机监控器授权、虚拟机的资源分配及虚拟机之间的通信三种访问行为.其自主访问策略允许为虚拟机实例及相关资源(统称负载)定义标签集和冲突标签集,MTIAC的强制访问策略确保了冲突负载无法运行于同一宿主机,而非冲突负载间可进行受控的数据共享.针对获得系统授权的访问控制操作,MTIAC更新了操作执行后主客体的属性,实现了系统状态的安全转换.可信虚拟数据中心(TVDc)技术实例的分析表明MTIAC模型具有可行性.
Aiming at the possible data isolation and sharing requirements among multiple tenants in Infrastructure-as-a-Service (IaaS) cloud platform, a formalized access control model called MTIAC (Multi-Tenant IaaS Access Control) Virtual machine monitor resource allocation, virtual machine resource allocation, and virtual machine communication between the three visits.The autonomic access policy allows for the virtual machine instance and related resources (collectively referred to as load) defined label set and conflict label set, MTIAC Forced access policies ensure that conflicting workloads can not run on the same host and that conflicting workloads can be used for controlled data sharing.For access control operations that are authorized by the system, MTIAC updates the host-guest properties of the operations and implements the system State Security Transitions. An analysis of the Trusted Virtual Data Center (TVDc) technology case demonstrates the feasibility of the MTIAC model.