1

Constructing trusted virtual execution environment in P2P grids

Authors: D. Zou, W. Zheng, J. Long, H. Jin, and X. ChenSource: Future Generation Computer Systems, vol. 26, pp. 769-775, 2010Speaker: Shu-Fen Chiou ( 邱淑芬 )

2

P2P Grid

Domain 1

Domain controllerVM based

backend peer

VM based backend

peer

.

.

.

P2P Grid management infrastructure

Domain n

Domain controllerVM based

backend peer

VM based backend

peer

.

.

.

user Ask a job helpe.g. Computing a problem

3

Virtual based backend peer Using virtual machine runs the user’s job The virtual machine (VM) image is matched

requirements user’s job Virtual machine image:

OS Application

The OS and application middleware are not secure.

Domain 1

Domain controllerVM based

backend peer

VM based backend

peer

.

.

.

user Ask a job help

4

Motivation

Construction a trusted execution environment on P2P grid nodes. The VM images are verified and

protected. The backend peer is selected by its

reputation.

5

VM-based P2P grid architecture

6

Trusted image store

CerCAuj , REQ (ACIMiuj)ACIMiuj

CerCAuj, img, Suj(SHA1(img)), ACimguj

CerCAISi , REQ(CERCAimg)

CerCAimg

7

Trusted image deployment

job

selectjob(img, BEi)

verify(img)launch(VM)

img

According the reputation

8

Backup job

imgi+1, Suj(SHA1(imgi+1)), CerCAimgi,P(CerCAuj),

9

Analysis

Overhead for trusted image store when a new image is submitted