Access control method for preventing virtual machine from escaping and attacking

Abstract

The invention discloses an access control method for preventing a virtual machine from escaping and attacking. The method comprises following four steps of: step 1, setting a corresponding model element; step 2, setting and introducing a monitor; step 3, operating a Learning model for preventing the virtual machine from escaping and attacking and recording system data; and step 4, operating an Enforce model for preventing the virtual machine from escaping and attacking and pre-judging the escaping and attacking of the virtual machine.The access control method for preventing the virtual machine from escaping and attacking has following beneficial effects: system call and resources utilization of between the virtual machine and Hypervision can be managed on a virtualized platform in order to effectively prevent the virtual machine from switching in the illegal access state; and the purpose of preventing the virtual machine from escaping and attacking is fulfilled.

Description

technical field [0001] The invention relates to a computer operating system and a virtualization technology, in particular to an access control method for preventing virtual machine escape attacks. Background technique [0002] Cloud computing regards IT resources, data, and applications as a service and provides them to users through the network. This is a change in service methods and a change in the shared data model. At present, IT companies around the world have formulated and released their own cloud strategies, such as Google, Amazon, IBM, etc., have formed cloud computing platforms that provide large-scale global computing services. The maintenance of the flexibility, reliability, and scalability of the cloud computing platform must rely on some new technologies, but the use of these new technologies not only brings security to cloud computing, but also brings some new security risks. [0003] Different types of cloud computing services have different technical supp...

AI Technical Summary

Problems solved by technology

Since the virtual machine simulator and the Hypervisor interact through I / O control simulation commands, the attacker at this time can simulate fake I / O operations to obtain Ring3 permissions in root mode, and then the attacker can use the hypervisor itself to exist Vulnerabilities or attack codes are injected into the Hypervisor, resulting in Hypervisor stack overflow, default command modification and other issues, and the Hypervisor has been compromised at this time

Since the attacker has obtained the Ring0 authority in root mode, the Hypervisor and the host operating system are in an unsafe state, the data of the host and the running status of all virtual machines running on the host may be attacked or tampered with

Images