A Security Virtualization Isolation Method Based on Mirror Intelligent Management

Abstract

The invention relates to the technical field of cloud computing virtualization safety, in particular to a safety virtualization isolation method based on mirror image intelligent management. The method includes the following steps of dynamically distributing and adjusting virtual machine resources, dynamically moving an operating system, executing virtualization safety isolation based on mirror image intelligent management, starting virtual machines from a host machine, modifying and tracking the execution effect of isolation programs and operating programs on the virtual machines or the host machine. Through the safety virtualization isolation method, safety isolation, functional completeness, performance adaptability, behavior monitorability and the like of a virtual system can be balanced, and the safety virtualization isolation method can be used for cloud computing virtualization safety.

Description

technical field [0001] The invention relates to the technical field of cloud computing virtualization security, in particular to a security virtualization isolation method based on image intelligent management. Background technique [0002] Virtualization is a rapidly developing emerging industry in the current cloud computing technology, with broad development prospects and application fields; but at the same time, the security threats and challenges faced by virtualized users and virtualized platforms in the Internet environment are also unprecedented. In a typical cloud computing service platform, resources are provided to users in the mode of virtualization and on-demand leasing. Virtualization can reduce operating costs and allow users to quickly deploy resources on demand; however, this flexibility also makes virtual machines Security risks are rapidly expanding on cloud computing platforms. If there are security holes in the virtualization software in the cloud compu...

AI Technical Summary

Problems solved by technology

[0004] The current virtualization isolation technology cannot allow each virtual machine to equally share the disk bandwidth and ensure the I / O performance isolation between virtual machines, which often results in conflicts between file system data and local disk data, and inconsistencies in key operating system files will lead to Virtualization system crashes

Due to the difference between the virtual machine and the host hardware environment, local services that depend on the hardware system are likely to cause the virtual machine to hang or even crash when it starts

In addition, the existing isolation program only performs virtual machine isolation operations, but lacks tracking of isolation execution effects, and cannot monitor data deletion and modification behaviors caused by external attacks in the operating environment

Images