虚拟化：一把双刃剑

摘要：

虚拟化在沉寂了二十多年之后，最近再次成为热门话题。与此同时，人们几乎忘记了，从原理上看，虚拟机并不像看起来那样完美的隔离环境。当第一个虚拟化系统在现实生活中使用时，这些经验教训就已经被吸取了。当代虚拟化软件可以在主机上即时创建和销毁虚拟机，从一台主机到另一台主机的实时迁移，执行历史操作等，这些功能在实践中非常有用，但也会引起安全专家的头痛，特别是在当前恶劣的网络环境中。在本文中，我们从似曾相识的角度讨论了虚拟化的原则、潜在好处和风险，并与大型机时代的虚拟化经验相关。

英文摘要：

Virtualization became recently a hot topic once again, after being dormant for more than twenty years. In the meantime, it has been almost forgotten, that virtual machines are not so perfect isolating environments as it seems, when looking at the principles. These lessons were already learnt earlier when the first virtualized systems have been exposed to real life usage. Contemporary virtualization software enables instant creation and destruction of virtual machines on a host, live migration from one host to another, execution history manipulation, etc. These features are very useful in practice, but also causing headaches among security specialists, especially in current hostile network environments. In the present contribution we discuss the principles, potential benefits and risks of virtualization in a deja vu perspective, related to previous experiences with virtualization in the mainframe era.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。