A vulnerability hot repair method based on xen virtualization platform

Abstract

The invention relates to a loophole thermal repair method based on a Xen virtualization platform. The method comprises the steps that a privileged domain Dom0 is used for repairing a Xen platform loophole, a machine does not need to be restarted and operation of a virtual machine on the platform does not need to be stopped, so that the loophole thermal repair function based on the Xen virtualization platform is achieved. According to the method, patch insertion and application can be completed through the privileged domain, and the patch controllability and safety are ensured. A Xen hyper calling operation is newly added for achieving communication between Xen and Dom0, flag bits are set before and after patch insertion, no patch addition or deletion or updating or selection operations are included, and the phenomenon that a Xen kernel function is damaged when a hostile attacker utilizes a virtual machine for applying hyper call is avoided. The virtualization platform loophole can be accurately repaired, the machine does not need to be restarted, normal operation of the virtual machine on the virtualization platform is ensured, and repair performed by means of Dom0 is safer.

Description

technical field [0001] The invention belongs to the technical field of cloud computing security, and relates to a method for repairing a vulnerability of a virtualization platform, in particular to a method for hot repairing a vulnerability based on a Xen virtualization platform. Background technique [0002] As a rapidly rising computing model, cloud computing has attracted extensive attention from the government, industry, and academia, and is bringing about a complete change to the entire IT industry. Cloud computing refers to the delivery of applications as services over the Internet, and the hardware and software in the data center can provide these services. Cloud computing helps enterprises, governments, public institutions, private institutions and research institutions to form more efficient and demand-driven computing systems. As a basic component of cloud computing, virtualization technology is the most important technical cornerstone supporting cloud computing. ...

AI Technical Summary

Problems solved by technology

The hot repair method does not affect the business operation of the upper-level cloud service users, and the technical threshold is high. At the same time, various software and hardware combinations need to be considered, which brings great challenges to cloud computing vendors.

Images