The Research On Virtual Machine Isolation And Migration Mechanism In The Cloud Desktop System

With the rapid development of cloud computing, the cloud service model hasadvantage in terms of cost, system scalability and maintenance management, and now ithas been recognized widely. Many cloud service providers have launched their own clouddesktop virtualization solutions. As the supporting technology of cloud computing,virtualization has changed the original computation mode and software deploymentscheme, that make the traditional security goals achieved face new challenges. Therefore,the researching on the problems existing in the virtualization under the circumstance ofcloud computing and the searching on new solution of keeping security are extremelyurgent.The thesis’s main research content and application value are organized as follows:1. By researching present situation and technical principle of virtual desktopinfrastructure (VDI), and combinig with the key technology in current virtualizationsecurity, such as content filtering, security label and mirror image encryption, the securityrisks of virtualization under the circumstance of cloud computing are analyzed, especiallythe safety problems of multi security levels network faced, and then the thesis points outthe necessity of this. From the security perspective of cloud desktop system, the thesisanalyzes the virtual desktop solution in business isolation, storage isolation and networkisolation and other traditional security requirements, design a multi security levels virtualmachine security isolation model (MSL-VMSIM). The results indicate MSL-VMSIM iseffective enough to realize the security exchange of visits between the virtual machine(VM) system and resource isolation.2. The thesis has a deeply research on virtual machine (VM) migrations based on theVM security isolation model demonstrated above. Aimed at resolving the issues of theimbalance of resources and workloads at data centers, and the overhead together with thehigh cost of VM migrations, this thesis proposes a new VM migration strategy which isbased on the cloud model time series workload prediction algorithm. By setting the upperand lower workload bounds for host machines, and forecasting the tendency of theirsubsequent workloads by creating a workload time series using the cloud model, andstipulating a general VM migration criterion Workload-Aware Migration (WAM), theproposed strategy selects a source host machine, a destination host machine, and a VM on the source host machine carrying out the task of the VM migration. Experimental resultsand analyses show, through comparison with other peer research work, that the proposedmethod can effectively avoid VM migrations caused by momentary peak workload values,significantly lower the number of VM migrations, and reach and maintain a resource anddynamical workload balance of virtual machines promoting an improved utilization ofresources in the entire data center.To sum up, this thesis carried out active exploration and thorough research on virtualmachine cloud desktop system isolation mechanism and the migration mechanism of theproblem, design a multi security levels virtual machine security isolation model(MSL-VMSIM) and presents a virtual machine migration strategy to predict migrateobjects of VM which is based on time series workload prediction using cloud model,which have greatly enriched the theory research of multi security levels virtual desktopsolution based on the technology of virtual desktop infrastructure (VDI).