Protection method and related equipment thereof

Abstract

The invention discloses a protection method and related equipment, and the method comprises the steps: obtaining a to-be-executed operation in a kernel layer; if it is determined that the to-be-executed operation belongs to a first preset operation type, the to-be-executed operation is a process in a container, a target directory corresponding to the to-be-executed operation is a to-be-used mounting directory pre-stored in a memory, and a target mounting device corresponding to the to-be-executed operation belongs to a host storage device, sending notification information to an application layer, so that the application layer to migrate a target operation object corresponding to the operation to be executed to an isolation area, and generating alarm information according to the target operation object; enabling the application layer to send the alarm information to an interaction layer, so that the interaction layer judges whether the operation to be executed is a normal business operation or not, obtaining an identification result corresponding to the operation to be executed, and sending the identification result to the application layer; and enabling the application layer to determine the object processing operation corresponding to the operation to be executed according to the identification result, so that the security of a virtual machine (or a host machine) deployed with a container can be effectively improved.

Description

technical field [0001] The present application relates to the technical field of cloud computing, in particular to a protection method and related equipment. Background technique [0002] With the rapid development of cloud computing technology, virtualization technology has gradually become a popular technology. The hardware-based virtualization technology usually refers to a virtual machine, while the operating system-based virtualization technology usually refers to a container. For example: one hardware server can virtualize multiple virtual machines, and each virtual machine can virtualize multiple containers. [0003] The advantage of containers is that they can isolate resources and avoid mutual interference. Therefore, many cloud users deploy business applications on containers. [0004] However, in some cases, a hacker can use the container to invade the virtual machine (or host machine) where the container is located, so that the security of the virtual machine (...

AI Technical Summary

Problems solved by technology

[0004] However, in some cases, hackers can use the container to invade the virtual machine (or host) where the container is located, so that the security of the virtual machine (or host) deployed with the container is relatively low

Images