Security protection method and system based on virtualization environment

Abstract

The invention provides a security protection method and system based on the virtualization environment. The security protection method includes the steps that when virtual machines need to be transferred to an aim physical host from a source physical host of the virtual machines, and when a source security virtual machine of the source physical host carries out security protection events on transferred virtual machines needing to be transferred, the transferred virtual machines obtain protection schedule information of the security protection events from the source security virtual machine, and to-be-protected data corresponding to the security protection events is obtained from source physical memory space; the transferred virtual machines send the protection schedule information to an aim security virtual machine of the aim physical host after being transferred to the aim physical host, and meanwhile the to-be-protected data is written into aim physical memory space of the aim physical host; the aim security virtual machine continues to carry out security protection on the to-be-protected data written in the aim physical memory space according to the protection schedule information after receiving the protection schedule information. Uninterrupted security protection of virtual machine transferring can be achieved.

Description

technical field [0001] The invention relates to the technical field of virtualization, in particular to a security protection method and system based on a virtualization environment. Background technique [0002] With the widespread application of hardware virtualization technology, multiple operating systems can run simultaneously on a physical host, and the operating systems are isolated from each other, making the management of hardware facilities more effective, flexible and economical. For example: the virtual machines on the physical host with high resource usage can be migrated to a physical host with low resource usage, so as to achieve a reasonable allocation of resources; or all the virtual machines on the physical host with low resource usage can be migrated to other physical hosts, and shut down the physical host so as to achieve the effect of energy saving. However, the security threats faced in the traditional operating system deployment will also be faced in ...

AI Technical Summary

Problems solved by technology

[0005] Based on this, it is necessary to provide a virtualization environment-based The security protection method and system are capable of performing uninterrupted security protection on the protected virtual machine when the virtual machine being protected in the physical host adopting the agentless security protection mode is migrated

Images