PC端Android模拟器操作系统虚拟化技术的实现
|
摘要
为了解决传统方法工作量很大,虚拟化效率低,无法保证运行安全性,虚拟化性能低的问题,提出一种新的PC(personal computer)端Android模拟器操作系统虚拟化技术。设计PC端Android模拟器操作系统虚拟化技术框架,对框架内核层进行详细分析。在内核层中,于Linux内核构造若干互相独立容器,在各容器中运行独立的Android模拟器操作系统,实现设备隔离。利用容器API(application programming interface)对命令进行调用,实现对容器的管理。用Sensor代表传感器,利用Sensor Manager的int type法达到实例化的目的。通过ARM(advanced reduced instruction set computer machines)虚拟化技术实现硬件辅助虚拟化,ARM虚拟化扩展通过两阶段页表转换管理设备虚拟化,安全扩展通过计算信任值进行管理,设定信任阈值,只允许高于信任阈值的节点访问。结果表明,所提方法有很高的隔离安全性,性能损耗低,说明所提方法整体性能优。
In order to solve the problems of heavy workload,low efficiency of virtualization,no guarantee of running security and low virtualization performance of traditional methods,a new virtualization technology for personal computer( PC)-side Android simulator operating system is proposed. The virtualization technology framework of PC-side Android simulator operating system was designed,The kernel layer in the framework was analyed in detail. In the kernel layer,several independent containers were constructed in the Linux kernel to run the independent Android simulator operating system in each container to achieve device isolation. Container application programming interface( API) was used to invoke the command to realize the management of containers. Sensor was used to represent the sensor and the int type method of SensorManager was used to achieve the purpose of instantiation.Hardware-assisted virtualization was realized by advanced reduced instruction set computer machines( ARM) virtualization technology. ARM virtualization extension manages device virtualization through two-stage page table transformation. Security extension manages by computing trust values and setting trust thresholds. Only nodes above the trust thresholds are allowed to access. The results show that the proposed method has high isolation security and low performance loss,indicating the overall performance of the proposed method is excellent.
In order to solve the problems of heavy workload,low efficiency of virtualization,no guarantee of running security and low virtualization performance of traditional methods,a new virtualization technology for personal computer( PC)-side Android simulator operating system is proposed. The virtualization technology framework of PC-side Android simulator operating system was designed,The kernel layer in the framework was analyed in detail. In the kernel layer,several independent containers were constructed in the Linux kernel to run the independent Android simulator operating system in each container to achieve device isolation. Container application programming interface( API) was used to invoke the command to realize the management of containers. Sensor was used to represent the sensor and the int type method of SensorManager was used to achieve the purpose of instantiation.Hardware-assisted virtualization was realized by advanced reduced instruction set computer machines( ARM) virtualization technology. ARM virtualization extension manages device virtualization through two-stage page table transformation. Security extension manages by computing trust values and setting trust thresholds. Only nodes above the trust thresholds are allowed to access. The results show that the proposed method has high isolation security and low performance loss,indicating the overall performance of the proposed method is excellent.
引文
1刘博文,顾乃杰,谷德贺,等.移动平台Android操作系统虚拟化技术的实现[J].计算机工程与应用,2017,53(14):32-38Liu Bowen,Gu Naijie,Gu Dehe,et al.Implementation of OS-level virtualization technology for Android on mobile platform[J].Computer Engineering and Applications,2017,53(14):32-38
2杨霞,孙超群.采用容器技术的多Android系统的研究与实现[J].小型微型计算机系统,2016,37(7):1422-1427Yang Xia,Sun Chaoqun.Research and implementation of multiple android systems based on the container technique[J].Journal of Chinese Computer Systems,2016,37(7):1422-1427
3史国振,黄琼,席宗虎,等.基于QEMU的安卓进程发现工具设计与实现[J].计算机工程与设计,2015,3(4):851-856Shi Guozhen,Huang Qiong,Xi Zonghu,et al.Design and implementation of QEMU-based process detecting tool for Android[J].Computer Engineering and Design,2015,3(4):851-856
4 Madhavapeddy A,Scott D J.Unikernels:the rise of the virtual library operating system[J].Communications of the ACM,2014,57(1):61-69
5胡嘉杰,蒋乐天.Android系统中Win32环境的高性能虚拟[J].计算机应用,2015,35(3):886-890Hu Jiajie,Jiang Letian.High performance simulation of Win32 environment in Android system[J].Journal of Computer Applications,2015,35(3):886-890
6高汉军,曲鸣,李青,等.核电站分布式系统虚拟过程控制平台设计研究[J].计算机仿真,2017,34(2):144-149Gao Hanjun,Qu Ming,Li Qing,et al.Research and design on virtual DCS process control platform in nuclear power plant[J].Computer Simulation,2017,34(2):144-149
7郭松辉,李清宝,孙磊,等.基于ISSM的密码服务系统虚拟化性能建模[J].系统仿真学报,2017,29(8):1692-1701Guo Songhui,Li Qingbao,Sun Lei,et al.Performance modeling of cryptographic service system virtualization based on ISSM[J].Journal of System Simulation,2017,29(8):1692-1701
8钟若武,王惠平.嵌入式Web控制终端的物联网移动E-Laboratory平台[J].计算机测量与控制,2015,23(2):551-553Zhong Ruowu,Wang Huiping.Mobile E-Laboratory platform for Io Tbased on embedded web control terminal[J].Computer Measurement&Control,2015,23(2):551-553
9张伶俐,张功萱,王天舒,等.嵌入式系统可信虚拟化技术的研究与应用[J].计算机工程与科学,2016,38(8):1654-1660Zhang Lingli,Zhang Gongxuan,Wang Tianshu,et al.Trusted virtualization technology in embedded system and its application[J].Computer Engineering and Science,2016,38(8):1654-1660
10 Bridges P G,Arnold D,Pedretti K T,et al.Virtual-machine-based emulation of future generation high-performance computing systems[J].International Journal of High Performance Computing Applications,2016,26(3):347-352
11王正敏,李威.烟草企业信息系统虚拟化平台迁移方案设计[J].科技通报,2017,33(7):114-116Wang Zhengmin,Li Wei.Solution design of virtualization platform migration for tobacco industry information systems[J].Bulletin of Science and Technology,2017,33(7):114-116
12杨永,钱振江,黄皓.一种轻量级的Android内核保护监控器[J].计算机工程,2014,40(4):48-52Yang Yong,Qian Zhenjiang,Huang Hao.A lightweight monitor for android kernel protection[J].Computer Engineering,2014,40(4):48-52
13吴欣华.基于虚拟化技术的医院信息化平台设计与研究[J].电子设计工程,2017,25(6):55-57Wu Xinhua.Design and research of hospital information platform based on virtualization technology[J].Electronic Design Engineering,2017,25(6):55-57
14范伟,孔斌,张珠君,等.KVM虚拟化动态迁移技术的安全防护模型[J].软件学报,2016,27(6):1402-1416Fan Wei,Kong Bin,Zhang Zhujun,et al.Security protection model on live migration for KVM virtualization[J].Journal of Software,2016,27(6):1402-1416
15 Javanmardi S,Shojafar M,Shariatmadari S,et al.PGSW-OS:a novel approach for resource management in a semantic web operating system based on a P2P grid architecture[J].Journal of Supercomputing,2014,69(2):955-975
16杨启超,徐开勇,尚京,等.基于虚拟化的多网安全办公系统研究与设计[J].科学技术与工程,2014,14(22):240-244Yang Qichao,Xu Kaiyong,Shang Jing,et al.Design and research of multiple network security office system based on virtualization[J].Science Technology and Engineering,2014,14(22):240-244
17 Peter S,Li J,Zhang I,et al.Arrakis:the operating system is the control plane[J].ACM Transactions on Computer Systems,2015,33(4):1-30
2杨霞,孙超群.采用容器技术的多Android系统的研究与实现[J].小型微型计算机系统,2016,37(7):1422-1427Yang Xia,Sun Chaoqun.Research and implementation of multiple android systems based on the container technique[J].Journal of Chinese Computer Systems,2016,37(7):1422-1427
3史国振,黄琼,席宗虎,等.基于QEMU的安卓进程发现工具设计与实现[J].计算机工程与设计,2015,3(4):851-856Shi Guozhen,Huang Qiong,Xi Zonghu,et al.Design and implementation of QEMU-based process detecting tool for Android[J].Computer Engineering and Design,2015,3(4):851-856
4 Madhavapeddy A,Scott D J.Unikernels:the rise of the virtual library operating system[J].Communications of the ACM,2014,57(1):61-69
5胡嘉杰,蒋乐天.Android系统中Win32环境的高性能虚拟[J].计算机应用,2015,35(3):886-890Hu Jiajie,Jiang Letian.High performance simulation of Win32 environment in Android system[J].Journal of Computer Applications,2015,35(3):886-890
6高汉军,曲鸣,李青,等.核电站分布式系统虚拟过程控制平台设计研究[J].计算机仿真,2017,34(2):144-149Gao Hanjun,Qu Ming,Li Qing,et al.Research and design on virtual DCS process control platform in nuclear power plant[J].Computer Simulation,2017,34(2):144-149
7郭松辉,李清宝,孙磊,等.基于ISSM的密码服务系统虚拟化性能建模[J].系统仿真学报,2017,29(8):1692-1701Guo Songhui,Li Qingbao,Sun Lei,et al.Performance modeling of cryptographic service system virtualization based on ISSM[J].Journal of System Simulation,2017,29(8):1692-1701
8钟若武,王惠平.嵌入式Web控制终端的物联网移动E-Laboratory平台[J].计算机测量与控制,2015,23(2):551-553Zhong Ruowu,Wang Huiping.Mobile E-Laboratory platform for Io Tbased on embedded web control terminal[J].Computer Measurement&Control,2015,23(2):551-553
9张伶俐,张功萱,王天舒,等.嵌入式系统可信虚拟化技术的研究与应用[J].计算机工程与科学,2016,38(8):1654-1660Zhang Lingli,Zhang Gongxuan,Wang Tianshu,et al.Trusted virtualization technology in embedded system and its application[J].Computer Engineering and Science,2016,38(8):1654-1660
10 Bridges P G,Arnold D,Pedretti K T,et al.Virtual-machine-based emulation of future generation high-performance computing systems[J].International Journal of High Performance Computing Applications,2016,26(3):347-352
11王正敏,李威.烟草企业信息系统虚拟化平台迁移方案设计[J].科技通报,2017,33(7):114-116Wang Zhengmin,Li Wei.Solution design of virtualization platform migration for tobacco industry information systems[J].Bulletin of Science and Technology,2017,33(7):114-116
12杨永,钱振江,黄皓.一种轻量级的Android内核保护监控器[J].计算机工程,2014,40(4):48-52Yang Yong,Qian Zhenjiang,Huang Hao.A lightweight monitor for android kernel protection[J].Computer Engineering,2014,40(4):48-52
13吴欣华.基于虚拟化技术的医院信息化平台设计与研究[J].电子设计工程,2017,25(6):55-57Wu Xinhua.Design and research of hospital information platform based on virtualization technology[J].Electronic Design Engineering,2017,25(6):55-57
14范伟,孔斌,张珠君,等.KVM虚拟化动态迁移技术的安全防护模型[J].软件学报,2016,27(6):1402-1416Fan Wei,Kong Bin,Zhang Zhujun,et al.Security protection model on live migration for KVM virtualization[J].Journal of Software,2016,27(6):1402-1416
15 Javanmardi S,Shojafar M,Shariatmadari S,et al.PGSW-OS:a novel approach for resource management in a semantic web operating system based on a P2P grid architecture[J].Journal of Supercomputing,2014,69(2):955-975
16杨启超,徐开勇,尚京,等.基于虚拟化的多网安全办公系统研究与设计[J].科学技术与工程,2014,14(22):240-244Yang Qichao,Xu Kaiyong,Shang Jing,et al.Design and research of multiple network security office system based on virtualization[J].Science Technology and Engineering,2014,14(22):240-244
17 Peter S,Li J,Zhang I,et al.Arrakis:the operating system is the control plane[J].ACM Transactions on Computer Systems,2015,33(4):1-30