Virtual platform information security protection method

Abstract

The invention discloses a virtual platform information security protection method. The method includes setting a virtual platform detection system, a virtual platform protection system and a virtual platform management system; acquiring network traffic, and performing host firewall security rule matching on the traffic through the virtual platform detection system; allowing a virtual interpreter to forward the matched traffic on the hypervisor layer of the virtual platform protection system, judging whether a set network access control strategy is met or not through a virtual platform protection layer after forwarding, and refusing to forward if the strategy is met; analyzing traffic information without limitation, when a traffic security strategy is not met, filtering the traffic. Compared with the prior art, the method had the advantages that the access control between virtual machines can be implemented; by means of QoS arrangement, VLAN classification and traffic filtering functions, the probability of malicious traffic communication can be reduced.

Description

technical field [0001] The invention relates to the technical field of computer information security, in particular to a method for protecting information security under a virtualization platform with strong practicability. Background technique [0002] With the advent of the era of cloud computing and big data, server virtualization technology has achieved rapid development. Server virtualization refers to running multiple logical computers on one server at the same time, and each virtual logical computer can run different operating systems. , each system provides one or more services to the outside world, and each logical computer can run independently of each other without affecting each other, which can significantly improve the work efficiency of the computer. However, while this architecture brings convenience and efficiency to people, there are also many security risks, such as hypervisor security, possible attacks and security blind spots between different virtual ma...

AI Technical Summary

Problems solved by technology

However, while this architecture brings convenience and efficiency to people, there are also many security risks, such as hypervisor security, possible attacks and security blind spots between different virtual machines, due to The communication between virtual machines is completed inside the virtualization platform without the participation of external networks. Therefore, the traditional network boundary cannot capture this information, so it cannot be protected. However, as the scale of virtual machines increases, the existing Some configuration management adds a lot of pressure, and how to effectively configure and manage virtual machines has become a problem that needs to be solved

Images