A patch management method and device for virtualization environment

Abstract

The invention provides a patch management method under virtualized environment. The method comprises the following steps of: deploying a platform agent on a virtualization platform; deploying a virtual machine agent on a virtual machine; deploying a patch management control platform on the virtualization platform or the virtual machine; and controlling, by the patch management control platform, the virtual machine agent to carry out a vulnerability scanning task in path management work, and if unfixed vulnerabilities exist, controlling, by the patch management control platform, the virtual machine agent to carry out a patch repair task in the patch management work. The patch management method used under the virtualized environment has the advantages of realizing opening and closing of virtual machines, conversion between virtual machines and templates, and intelligent scheduling of vulnerability fixing tasks. The invention furthermore provides a patch management device used under the virtualized environment.

Description

technical field [0001] The invention relates to the technical field of terminal security in a virtualized environment, in particular to a patch management method and device for a virtualized environment. Background technique [0002] Patch management is the most basic part of terminal security. In a virtualized environment, vulnerability repair, which is the core element of patch management, is still an important part of security protection and virtual machine hardening. At present, most of the patch management solutions in the virtualized environment are to directly migrate the traditional patch management solutions in the non-virtualized environment to the virtualized environment, rely on the C / S architecture, and fail to give full play to the characteristics of the virtual machine technology. When the virtual machine is in the shutdown state or converted to a template, patch management such as vulnerability scanning and repair cannot be performed on the offline virtual m...

AI Technical Summary

Problems solved by technology

The vulnerability repair task is a high-resource-consuming job, especially the high demand for IO resource occupation.

Therefore, if there is no good scheduling mechanism, when virtual machines on the same physical node perform vulnerability repair tasks at the same time, there may be a shortage of server resources, which seriously affects the experience of using virtual machines

Images