提出一种IaaS(infrastructure as a service)完整性度量协议,该协议允许租户主动发起对IaaS资源的度量和验证,使租户能够检测其自身资源的完整性状态,增强IaaS资源状态的可见性.利用SVO逻辑对协议的安全性、完备性进行了分析,并搭建实验平台对协议的抗攻击能力和时间性能进行了验证.分析和实验证明,该协议能够抵御重放攻击、假冒攻击等多种形式的攻击,同时协议的执行耗时不会影响租户的正常使用体验. An IaaS (Integrity as a Service) integrity measurement protocol is proposed, which allows tenants to proactively initiate measurement and verification of IaaS resources so that tenants can detect the integrity status of their own resources and enhance the visibility of IaaS resource status. SVO logic analyzes the security and completeness of the protocol, and builds an experimental platform to verify the anti-attack capability and time performance of the protocol.Analysis and experiments show that the protocol can resist replay attacks, counterfeit attacks and other forms Of the attacks, while the implementation of the agreement does not affect the normal use of the tenant experience.