Method and system for protecting safety of virtual machine under virtual platform network isolation

Abstract

The invention provides a method and system for protecting virtual machine safety under virtual platform network isolation. The method comprises the steps: obtaining an online threat information list,and forming a threat information library; after receiving a process collection instruction issued by the QGA monitoring module, the virtual machine collects current running process information of thevirtual machine through the qemu-ga module to form a process list, calculates a hash value of each process file in the process list, and returns the hash value to the QGA monitoring module; checking whether the hash value exists in the threat intelligence library or not, If yes, adding the process information into a virtual machine vulnerability information table; and the safety management centergives an alarm prompt according to the virtual machine vulnerability information table. Under the condition of network isolation, the data interaction between the virtualization management platform and the virtual machine is formed through the QGA monitoring module and the qemu-ga module, the safety management of the virtualization management platform on the virtual machine is realized, and the information safety of the virtual machine is ensured.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and system for protecting the security of a virtual machine under network isolation of a virtual platform. Background technique [0002] At present, mainstream virtualization vendors use QEMU (Quick Emulator, a fast emulator, a virtualization technology for software simulation) technology to virtualize hardware devices and form a huge resource such as servers, storage, and networks in the data center. The administrator can dynamically monitor, schedule and deploy resources in the pool through the virtualization management platform, and provide them to users through the network, which improves the utilization rate of data center resources and reduces the complexity of management. In order to ensure the data security of the management platform, virtualization vendors usually use a VLAN (Virtual Local Area Network, Virtual Local Area Network) to isolate the man...

AI Technical Summary

Problems solved by technology

[0004] The present invention provides a method and system for protecting the security of a virtual machine under network isolation of a virtual platform, which is used to solve the existing problem that the virtualization management platform cannot manage the security of the virtual machine when the management network and the service network are network isolated

Images