Method and device for measuring a virtual machine

Abstract

The present invention provides a measurement method and device for a virtual machine. The method includes: configuring a file to be measured and a white list; constructing a behavior information base corresponding to each white list software in the white list; Measure its kernel file and the file to be measured, and judge whether the kernel file and the file to be measured are credible; every set first interval time, obtain the process and memory currently in the running state in the virtual machine Information; according to the process and memory information currently in the running state, it is judged whether there is software running outside the white list on the virtual machine; The software behavior of the whitelisted software is compared with the corresponding behavioral information base to determine whether each whitelisted software is running normally. The device includes: a configuration unit, a construction unit, a first measurement unit, an acquisition unit, a second measurement unit and a third measurement unit. This solution can improve the security of the virtual machine.

Description

technical field [0001] The invention relates to the field of computer security, in particular to a virtual machine measurement method and device. Background technique [0002] With the continuous development and growth of computer technology, the application range of servers is becoming more and more extensive. Servers generally use virtualization technology to build multiple virtual machines on a server host, and multiple virtual machines share the physical equipment on the server host. Multiple users use it, and users perform corresponding data calculation and processing through virtual machines. Because virtual machines have the characteristics of diverse security threats, high frequency of attacks, and difficulty in detection and prevention, the security of virtual machines is a technical problem that needs to be solved urgently. [0003] At present, the measurement method for the virtual machine is mainly to measure the virtual machine image file during the creation pr...

AI Technical Summary

Problems solved by technology

[0004] For the method of measuring the virtual machine in the prior art, the integrity of the virtual machine is only measured before the virtual machine is running, which can only ensure the normal startup of the virtual machine, but after the virtual machine is started, during the running process, the virtual machine The type of running software and the running status of each software are not controlled. Malicious software is likely to damage the virtual machine or steal key user information. Therefore, the security of the virtual machine is low.

Images