Monitoring system and method in virtual machine environment

Abstract

The invention provides a monitoring system and method in a virtual machine environment. The system comprises a monitoring module, an inter-domain communication module, a rule base, an analyzing module, a response service module, a response accepting module, an event processing module and the like. The monitoring system and method in the virtual machine environment is used for security protection of the virtual machine running environments of users, can manage and control resources used by virtual machines or even monitor processes inside the virtual machines, and also, can correct content of virtual machine disks of the virtual machines, thereby ensuring the monitoring reliability when the monitoring module is deployed inside a virtual machine manager; meanwhile, combined with the virtual machine introspection technology, the monitoring system and method in virtual machine environment can effectively detect the kernel space of monitored virtual machine and further avoid intrusion.

Description

technical field [0001] The invention relates to a monitoring system and a monitoring method in a virtual machine environment. Background technique [0002] In the prior art, the well-known technology is that the security issue in the virtualization environment is an important issue in the development of virtualization technology and cloud computing technology. With the rapid development of these two technologies, virtualization security has received more and more attention. attention. In the virtualization environment, the technical layer of virtual machine manager is added. The guest operating system uses the logical resources abstracted by the virtual machine manager. Multiple virtual machines can exist on the same physical machine at the same time. These virtual machines share the underlying physical resources. resource. The characteristics of the virtualized environment bring about security problems that do not exist in the traditional environment. For example, the vir...

AI Technical Summary

Problems solved by technology

The characteristics of the virtualized environment bring about security problems that do not exist in the traditional environment. For example, the virtualized environment is highly dynamic, the security boundary is blurred, and the management and maintenance are more complicated. A security hole in a virtual machine may affect the same physical threats to other virtual machines on the machine, etc.

Some security threats in the traditional environment, such as viruses, Trojans, and malware, still exist in the virtual environment, but the traditional security protection methods for them are difficult to adapt to the virtual environment

[0003] Installing antivirus software on each virtual machine using the traditional protection method in a virtual environment, the intrusion detection and intrusion prevention system will consume a lot of resources and greatly reduce system performance, which is obviously not the best method, and the protection software is installed on the virtual machine vulnerable to attack and control, new technologies are needed to solve such security problems

Images