标题： 操作系统级虚拟化的安全性分析 显示英文标题

标题： Analysis of Security in OS-Level Virtualization

摘要： 虚拟化是一种技术，允许在单个物理硬件上运行多个实例，通常这些实例运行不同的客户操作系统。 一个运行在主机操作系统之上的软件层，即虚拟机监视器，通常负责运行和管理这些不同的客户操作系统。 为了可靠性和安全性原因，公司开始在其服务器上采用虚拟化技术，以在单个服务器内运行这些服务。 这种方法对公司有益，因为它相比在多台服务器上运行服务，提供了更好的可靠性、更强的隔离性、改进的安全性和资源利用率。 尽管基于虚拟机监视器的虚拟化提供了更好的资源利用率和更强的隔离性，但它也由于主机操作系统必须维护不同的客户操作系统而存在较高的开销。 为了解决这个问题，另一种称为操作系统级虚拟化的虚拟化形式应运而生。 这种虚拟化提供轻量级、最小化且高效的虚拟化，因为不同的实例是在同一主机操作系统之上运行的，并共享主机操作系统的资源。 但由于实例共享同一主机操作系统，这会影响实例的隔离性。 在本文中，我们将首先建立虚拟化的基本概念，并指出基于虚拟机监视器的虚拟化与操作系统级虚拟化之间的差异。 接下来，我们将讨论容器创建生命周期，这有助于形成容器系统的容器威胁模型，从而可以映射这些系统中的不同潜在攻击向量。 最后，我们将讨论一个案例研究，进一步探讨容器提供的隔离性。 显示英文摘要

摘要： Virtualization is a technique that allows multiple instances typically running different guest operating systems on top of single physical hardware. A hypervisor, a layer of software running on top of the host operating system, typically runs and manages these different guest operating systems. Rather than to run different services on different servers for reliability and security reasons, companies started to employ virtualization over their servers to run these services within a single server. This approach proves beneficial to the companies as it provides much better reliability, stronger isolation, improved security and resource utilization compared to running services on multiple servers. Although hypervisor based virtualization offers better resource utilization and stronger isolation, it also suffers from high overhead as the host operating system has to maintain different guest operating systems. To tackle this issue, another form of virtualization known as Operating System-level virtualization has emerged. This virtualization provides light-weight, minimal and efficient virtualization, as the different instances are run on top of the same host operating system, sharing the resources of the host operating system. But due to instances sharing the same host operating system affects the isolation of the instances. In this paper, we will first establish the basic concepts of virtualization and point out the differences between the hyper-visor based virtualization and operating system-level virtualization. Next, we will discuss the container creation life-cycle which helps in forming a container threat model for the container systems, which allows to map different potential attack vectors within these systems. Finally, we will discuss a case study, which further looks at isolation provided by the containers.