Towards Trusted Cloud Computing

本文计划设计一个可信赖云计算平台（简称TCCP）。可信赖云计算平台能让亚马逊弹性计算云这样的基础架构即服务（IaaS）提供商提供一个封闭式可执行环境，以此来保证客户端虚拟机的诚信管理。另外还能帮助用户来检验基础架构即服务（IaaS）提供商，在用户使用虚拟机之前来决定提供商的服务是否足够安全。

尽管这篇论文比较简短，但它的信息量却十分充足。其中的概念涉及两个方面：可信赖虚拟机监控（简称TVMM）和可信赖协调器（简称TC）。笔者建议考虑将高价值数据资源迁移到云上的每个人都应该了解这些概念。

Abstract

Cloud computing infrastructures enable companies to cut costs by outsourcing computations on-demand. However, clients of cloud computing services currently have no means of verifying the confidentiality and integrity of their data and computation.

To address this problem we propose the design of a trusted cloud computing platform (TCCP). TCCP enables Infrastructure as a Service (IaaS) providers such as Amazon EC2 to provide a closed box execution environment that guarantees confidential execution of guest virtual machines. Moreover, it allows users to attest to the IaaS provider and determine whether or not the service is secure before they launch their virtual machines.

temp_10022311206008.pdf