A hybrid monitoring measurement method and system for virtual machines

Abstract

The present invention provides a method and system for hybrid monitoring and measurement on a virtual machine. The system includes: a configuration center module located in a privileged virtual machine, which is used to configure a list of application programs that need to be measured, a standard value table, and a black and white list The measurement module located in the guest virtual machine measures the memory occupied by the application program running in the guest virtual machine according to the measurement instruction; the kernel monitoring module located in the privileged virtual machine is used to obtain the memory data of the measurement module measurement agent And measure and monitor the integrity of the memory data; the control center module is used to read the configuration data of the configuration center module and issue a measurement instruction to the measurement module and a monitoring instruction to the kernel monitoring module. The present invention can avoid the overhead caused by frequent switching between client virtual machines through the measurement inside the virtual machine, and the monitoring outside the virtual machine can improve the security of the virtual framework.

Description

technical field [0001] The present invention relates to the technical field of computer applications, in particular to the technical field of system integrity measurement framework, in particular to a hybrid monitoring measurement method and system for virtual machines. Background technique [0002] As cloud computing has received more and more extensive research and attention, the core technology behind it - virtualization technology has gradually come into people's sight. As a new type of computer technology, computer system virtualization technology greatly improves the resource utilization rate of the computer system, thus taps the idle computing potential of the computer system, and can transform the IT environment into a more powerful, flexible, More dynamic architecture. By integrating multiple operating systems into one high-performance server, it maximizes the use of all resources of the hardware platform and realizes more applications with less investment. It can ...

AI Technical Summary

Problems solved by technology

[0007] Although virtual machines have many features, their security issues have always been challenged

Its disadvantage is that it only guarantees the integrity of the system before execution, but cannot verify whether the system is attacked by viruses during operation.

Although this scheme guarantees the credibility of the measurement results, it does not solve the problem that the system may be attacked during runtime, and it is still a static measurement.

Images