Agent-free virtual machine peripheral sealing control method and system and medium

Abstract

The invention discloses an agent-free virtual machine peripheral sealing control method and system and a medium. The virtual machine peripheral sealing control method comprises the implementation steps that a virtual desktop client is connected to a virtual desktop of a virtual machine on a virtualization server after a user logs in; the virtual desktop client sends a peripheral access request tothe virtualization server to obtain the peripheral access control authority of the user; and the virtual desktop client acquires a local equipment list of the virtual client, redirects each enabled equipment to the virtual desktop of the virtual machine according to the peripheral access control authority of the user, and sets the read-write authority of the equipment. According to the invention,peripheral sealing control on the virtual machine can be achieved, an operating system of the virtual machine does not need to be changed, any agent program does not need to be installed, security protection on the virtual machine peripheral can be achieved by means of the virtual machine monitor of the virtualization server, the security virtual machine and related components, and the advantagesof flexible use and simple and convenient configuration can be realized.

Description

technical field [0001] The invention relates to virtual machine technology, in particular to an agentless virtual machine peripheral sealing and control method, system and medium. Background technique [0002] With the popularity of cloud computing, virtualization technology has been widely used. Virtualization relies on software to emulate hardware functions and create virtual computer systems, known as virtual machines. Virtualization is the supporting technology of cloud computing. The biggest difference between cloud computing and traditional IT environments lies in its virtualized environment, and it is this difference that makes its security issues different from traditional models. [0003] Traditionally, to block and control the external devices of physical hosts, it is necessary to deploy a security protection product suite on each physical host, the so-called "security agent", and this security protection mode is called "agent-based mode (Agent-based)" . Howeve...

AI Technical Summary

Problems solved by technology

Therefore, the deployment mode in which each virtual machine is installed with security software occupies a large amount of storage space and memory resources of the physical host, and the deployment cost is high, and the management is complicated, which greatly affects the efficiency of the virtual desktop.

Images