Multi-level virtual desktop security enhancement technology based on docker and X server
Guangqiang Luan, Yuebin Bai, Chao Yu, Xudong Zhang, Rui Wang, Longshe Huo · 2018
With the development of virtualization technology, desktop virtualization is becoming more and more mature. Desktop virtualization can effectively isolate the use of users and the management of the system, but in the access to virtual desktops, its security has become a key factor which can't be ignored. In this paper, we propose a set of technologies that enhance the security of virtual desktops and can effectively secure virtual desktops from multiple levels. We improve the spice protocol and implement the multi-level access mechanism of users and virtual desktops. The Docker technology is used to implement the isolation of the communication, storage and network between the virtual desktop processes. Based on the X server mechanism, we isolate the virtual desktop client from GUI Level. The experimental results have shown the effects from various aspects, as well as differences in performance with the original client.