A method for implementing integrity verification of a cloud platform virtual machine

Abstract

The invention relates to a method for realizing the integrity verification of a cloud platform virtual machine, comprising the following steps: S1: generating and updating the image measurement result; S2: verifying the integrity of the startup process, generating the verification image measurement result, and The measurement result is compared with the latest image measurement result saved when shutting down in step S1; if consistent, the verification is passed and the virtual machine is started normally; if inconsistent, the verification fails and the virtual machine cannot be started; the measurement result of the mirror image And the verification image measurement result all includes file attribute, if the file attribute in the verification image measurement result has a change with the file attribute in the latest image measurement result saved when shutting down in step S1, then the verification fails; if consistent, then Proceed to data verification. The invention can ensure that the integrity of the image is not damaged, and can be found immediately when the image is tampered with maliciously.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method for realizing integrity verification of a cloud platform virtual machine. Background technique [0002] In recent years, cloud computing has become more and more popular. Through virtualization technology, cloud computing can make full use of existing computing, storage and network resources, which can not only reduce enterprise operating costs, but also has the advantages of easy maintenance. At the same time, cloud computing can provide on-demand configuration of resources, enabling enterprises to respond quickly to different business needs. As an emerging computing model, cloud computing technology is adopted by more and more enterprises and institutions. [0003] However, the key data of enterprises or government units are hosted on the public cloud, which has great security risks. Therefore, enterprises and institutions are more inclined to build their own priv...

AI Technical Summary

Problems solved by technology

If the MD5 method is used to hash a 10GB virtual machine image file, it will take a few minutes, resulting in a long response time for the virtual machine to start and shut down, which is difficult to meet the needs of daily use.

[0013] Therefore, this kind of integrity verification technology takes too much time, and increases linearly with the size of the image file, and has poor responsiveness, which cannot meet the application needs of users.

Images