Security monitoring method based on license authentication of cluster virtual machine

Abstract

The invention discloses a security monitoring method based on license authentication of a cluster virtual machine, and relates to the technical field of communication. The method comprises a cvm management platform and a plurality of target virtual machines, the cvm management platform is connected with the plurality of target virtual machines through Virtio channels. The cvm management platform distributes a license certificate with clustering to each virtual machine, and each virtual machine carries out independent stand-alone license authentication. Through license authentication of the cluster virtual machine, it is guaranteed that even if the virtual machine is operated on an unsafe hypervisor, any data in the target virtual machine is protected, and the risk that core data on the target virtual machine is stolen is avoided; and meanwhile, by injecting license, the target virtual machine can identify whether to run in a safe and reliable hypervisor environment or not, so that thelimitation and protection behaviors of the target virtual machine are changed through the agent agent program.

Description

technical field [0001] The invention belongs to the technical field of communications, in particular to a security monitoring method based on cluster virtual machine license authentication. Background technique [0002] In the architecture of the Lares internal monitoring system, security tools are deployed in an isolated virtual machine. The environment where the virtual machine is located is considered safe in theory, called a security domain, such as the Xen management virtual machine. [0003] The deployment of security tools and guest operating systems in the external monitoring framework is the same as that of the internal monitoring framework, and they are respectively located in two virtual machines isolated from each other, which enhances the security of security tools. [0004] The problem existing in the existing technical solutions is that if the target virtual machine is stolen and runs on an unsafe hypervisor environment, then the protection of the virtual mach...

AI Technical Summary

Problems solved by technology

The core data on the target virtual machine is at risk of being stolen

At the same time, the traditional virtual machine monitoring is still relatively weak monitoring, which only makes statistics and uploads data indicators such as cpu usage rate and memory usage rate of a single virtual machine