Sandbox system based on light-weight virtual machine monitor and method for monitoring OS with sandbox system

Abstract

The invention discloses a sandbox system based on a light-weight virtual machine monitor and a method for monitoring an OS with the sandbox system. The sandbox system comprises a virtualization management module, a sandbox strategy module, a virtual machine communication module and a light-weight virtualization sandbox module, as shown in the figure 1. According to the sandbox system, a light-weight virtual machine sandbox which is designed for the purpose of sandbox safety can be loaded dynamically according to the protective needs of a user. The light-weight virtual machine sandbox migrates the operation system into the light-weight virtual machine sandbox, system calling of a target course is monitored and intercepted, and suspicious operation on a file system from the target course is redirected under a sandbox protective route. The sandbox system has the advantages of being transparent to the operation system, small in code number, small in virtualization expenditure and the like.

Description

technical field [0001] The invention belongs to the field of computer security, and in particular relates to a sandbox system based on a lightweight virtual machine monitor. Background technique [0002] With the popularization of computer systems and computer networks, the Internet has developed into a running platform for many programs. However, due to loopholes in network protocols, computer operating systems, and browsers, computer systems are facing security challenges. At present, the active defense mechanism used by mainstream security software is immature, especially when the behavior of normal software coincides with the behavior of a virus, the active defense mechanism will cause manslaughter and cause the software to fail to run normally. In the face of more and more complex virus behaviors, the detection process of active defense will also greatly reduce the working performance of the computer. [0003] As a new type of security model, the sandbox provides a new...

AI Technical Summary

Problems solved by technology

[0014] In order to solve the above-mentioned problems such as huge operating system code, many loopholes, difficult to guarantee security, and the general virtual machine monitor is designed for resource isolation, therefore, the sandbox virtualization based on the general virtual machine monitor is expensive, etc., The invention provides a sandbox system based on a lightweight virtual machine monitor and a method for monitoring an OS with the sandbox system

Images