Virtual machine co-residency detection method based on response time sequence data analysis

Abstract

The invention discloses a virtual machine co-residency detection method based on response time sequence data analysis. The method comprises the following steps of 1), performing real-time acquisition of a response time sequence of a target virtual machine based on an ON-OFF interference injection mechanism, and then respectively extracting response time sequences of the target virtual machine in an interference condition and a normal condition; 2), processing abnormal values in acquired data; 3), calculating a co-residency probability; and 4), determining a detection result. According to the method of the invention, according to a characteristic of sharing a multi-tenancy resource of a cloud computing platform, the service response time sequences of the target virtual machine in the normal condition and the interference condition are acquired; through defining deviation degree between cloud models, the co-residency between a detecting virtual machine and the target virtual machine is calculated, thereby quantitatively describing the co-residency possibility between the detecting virtual machine and the target virtual machine. The virtual machine co-residency detection method ensures high accuracy and high reliability of a co-residency detection result and furthermore has high adaptability and high practical value.

Description

【Technical field】 [0001] The invention relates to the technical field of virtualization security, in particular to a virtual machine co-resident detection method based on response time series data analysis. 【Background technique】 [0002] As a new type of network computing model, cloud computing provides users with various virtual IT resources and application services through the network in an on-demand and easy-to-expand manner, and supports users to access from any location and using multiple terminals. Cloud computing not only greatly reduces the user's computing and storage burden, reduces the user's purchase, management and maintenance costs of various IT infrastructure, but also enables enterprise users to quickly redeploy and dynamically expand applications at any time according to changes in demand. [0003] see figure 1 and figure 2 As shown, in a cloud environment, virtual machines of different tenants may run on the same physical host, that is, the virtual mach...

AI Technical Summary

Problems solved by technology

Although this co-resident detection method has a low false detection rate and relatively accurate detection results; however, there is a fatal shortcoming, that is, it can only be applied to both the detection and the detected virtual machine (ie, the target virtual machine cooperation mode) It is not applicable to the situation where only the detection virtual machine is controlled in the real application scenario (that is, the non-target virtual machine cooperation mode)

[0008] To sum up, the existing virtual machine co-resident detection methods cannot solve the problem of virtual machine co-resident detection well.

Images