Research And Implementation Of Security Enhancement For Desktop Virtualization System

In recent years,with the accelerated development of information technology,desktop virtualization technology has become more and more mature,but the security and risk issues of desktop virtualization have received more and more attention,especially in information systems with sensitive information transmission.Based on this,a safe and reliable desktop virtualization security reinforcement program is proposed and applied in sensitive information systems,which has a positive role in promoting the application and promotion of desktop virtualization technology.Through in-depth research on mainstream desktop virtualization technology,desktop virtualization management platform,desktop transfer protocol,the thesis analyzes the pain points and finds that there are still greater security risks in the two aspects of desktop image transmission and user data erasure.In order to eliminate these two hidden dangers,combined with localized substitution,commercial password promotion and level protection requirements,this thesis applies commercial cryptographic algorithms and data erasure algorithms to desktop virtualization systems,but it brings new challenges of reduced availability.After research,the thesis proposes a security reinforcement research and implementation plan for desktop virtualization systems,which not only achieves system security,but also guarantees system availability.The specific research content is as followed:Firstly,the thesis researches and analyzes the basic technology of traditional desktop virtualization systems,and points out that traditional systems have major security risks in two aspects: desktop image transmission and user data erasure.This thesis uses commercial cryptographic algorithms to reinforce the desktop transmission protocol and rebuild the system platform with the new data erasure function,prevent and repair the two risks pointed out,and improve the security of the desktop virtualization system.Secondly,after the initial use of the above-mentioned commercial cryptographic algorithms and general disk erasing algorithms,it has brought new challenges to the usability of the system.In order to further optimize the scheme,the thesis first carried out cryptographic engineering transformation.On the basis of not changing the algorithm principle,the GPU is used to implement parallel computing.Compared with only using the CPU for calculation,the encryption and decryption efficiency is increased by more than 40 times.In addition,considering the system's disk erasing effect and speed requirements in the actual application environment,thesis proposes a set of customized disk data erasing algorithms to achieve the erasing speed required by the system on the basis of ensuring a certain erasing quality.Thirdly,based on the above-mentioned work,the thesis develops the design and implementation of a secure desktop virtualization system,and verifies the scheme through test experiments.The desktop virtualization system security reinforcement research and implementation plan achieves the expected goal,which improves security while ensuring functionality.The scheme proposed in the thesis is applied to the actual system to realize the pilot demonstration effect of the application of desktop virtualization technology in the sensitive information system.