Separate privilege virtual machine security model based on mutual trust.

Virtual machine security issues have been the focus of attention. The permissions of traditional management domain DomO are too large, so that the user's privacy is threatened. At the same time, once the attacker compromises DomO, it can threaten all the users. This paper presented a separate privilege virtual machine security model based on mutual trust (MTSP). It split DomO's privileges into three parts: the device driver, forming the isolated driver domain; the operations of the user's privacy, forming a DomU management domain; remaining forming Thin DomO. It achieved the startup of the system by the VMM and user together restricting each other. Combined with the model, the prototype system was implemented and security analysis and performance testing were done. It can protect the users' privacy, apportion the risk and isolate fault. [ABSTRACT FROM AUTHOR]