Tongxin xuebao (Jan 2009)
Private data isolation for OpenSSH based on virtual machines
Abstract
OpenSSH stores keys in the file system.The keys are easy to be exposed while the host has been invaded by illegal users.Methods are needed to protect these important data.For such purpose,virtual machine protection was pro-posed to provide a separate space for storing the important data as well as secure accessing interfaces.By using virtual machine even under the situation that the host is compromised,the important data can still be kept safe.Thus,the safe and separate space provided by virtual machine can protect the keys of OpenSSH securely.