A software compensation method and system for virtual machine rollback

Abstract

The invention discloses a software compensation method and system for virtual machine rollback and belongs to the field of virtualization security technology. According to the method, first, a target software source code generates code information, wherein the code information comprises control flow information, data dependency information and abstract grammar information; then, a code analysis technology is adopted to extract software rollback sensitive vectors and control flow paths to generate a rollback sensitive state table and a rollback sensitive control flow table at an offline preprocessing stage; and during software running, the rollback sensitive state in target software is monitored and recorded from an external virtual machine, and the rollback sensitive state in the target software is compensated for from the external virtual machine when a virtual machine rollback event is monitored. The software compensation system for virtual machine rollback is also realized. Through the technical scheme, it is not needed to make a special change to the target software, and real-time rollback protection can be performed from the outside of the virtual machine where the target software is installed.

Description

technical field [0001] The invention belongs to the technical field of virtualization security, and more specifically relates to a software compensation method and system for virtual machine rollback. Background technique [0002] Virtualization technology realizes the virtualization of system resources, thus fully adapting to the diverse demands of application software on system resources. As an important virtualization technology, virtual machine rollback plays a vital role in the virtual machine management of the virtualization platform. With the promotion of cloud computing in recent years, the usability and functionality of virtual machine rollback have been widely discussed. However, little attention has been paid to the security issues caused by the old state brought by the virtual machine rollback. [0003] Garfinkel and Rosenblum first discovered that virtual machine rollback has serious security problems. The essence of the virtual machine rollback mechanism is ...

AI Technical Summary

Problems solved by technology

Especially when this method is applied to a huge platform like a cloud platform, the work that requires the participation of programmers will become extremely complex and huge

(2) The method that allows replay can only allow the protection of deterministic modules, but the security of many state random modules will also be threatened by rollback, for example, the random number generator uses expired random numbers due to rollback

Restoring state in a way that allows replaying user requests can only be applied to deterministic software

Secondly, the passive recovery state makes the software in a state of not accepting new requests until the state is restored continuously, which affects the usability of the program.

Images