Cross-platform safety protection system based on hardware virtualization

Abstract

The invention provides a cross-platform safety protection system based on hardware virtualization, which belongs to the technical field of computer safety. The system provided by the invention comprises a system interception module, a hardware interface module, a system service module and a safety monitoring module, wherein the system interception module is used for intercepting the specified operation system sensitive behavior and outputting the intercepted information to the system service module; the system service module determines the corresponding safety protection mechanism according to the information, and outputting a control instruction to the safety monitoring module; the safety monitoring module executes the safety protection operation; and the hardware interface module receives the call instruction of the system service module and the safety monitoring module and achieves the interaction and data transmission with the hardware system. The system can monitor and intercept the sensitive behavior of the operation system through a virtual machine monitoring program, and determine whether the behavior is a bad one or a good one by virtue of the monitoring program according to the source and aim of the behavior so as to prevent or stop the harmful aggressive behavior in time to finally ensure the safe operation of the operation system.

Description

Cross-platform security protection system based on hardware virtualization technical field The invention relates to a protection system in the technical field of computer security, in particular to a cross-platform security protection system based on hardware virtualization. Background technique In 1970, virtualization technology was applied to the operating system for the first time as the IBM System / 370 extended architecture. The system uses a virtual machine to enable binary support for legacy code. Over time, both commercial and open source operating systems have continued to take full advantage of hardware virtualization capabilities. Therefore, the hardware virtualization technology of AMD and Intel (Intel) also came into being on this basis. Hardware virtualization technology provides direct support for virtualization technology at the hardware level, more precisely in the CPU, and improves virtualization efficiency and reduces development difficulty through this ...

AI Technical Summary

Problems solved by technology

At present, most commercial operating systems and open source operating systems have different system architectures and implementation methods, and the differences in these methods will lead to the design and implementation of security protection programs according to these different systems, increasing the difficulty of protection

3. For a security protection system based on virtualization, its performance overhead needs to be maintained at a low level

But this prior art realization is mainly aimed at based on the Linux operating system, although the Windows operating system can also run, the system protection support is not good, but it needs to be compiled and installed under the Linux system, which is highly dependent on the operating system

On the other hand, the virtual machine monitoring program is for the protection of I / O device access, cannot provide other system security protection mechanisms and has poor scalability

Images