Security network invasion detection system suitable for virtual machine environment

Abstract

The invention discloses a safe network intrusion detection system which is applicable to the virtual machine environment and includes a server inter-domain communication control module, an intrusion detection engine module, an intrusion response control module in the intrusion detection virtual machine, a client inter-domain communication control module, a domain spilt event detector module and adomain split response control module in the detected application virtual machines. According to the problem that the safety of the virtual machine system of the virtual machine needs to be improved; the current intrusion detection system cannot realize the purpose, the safe network intrusion detection system considers the layering structure of the virtual machine network sufficiently and realizesthe intrusion detection protection of the virtual machine system in the internal network based on the virtual machine; the safety of the virtual machine applied in the production practice activities is improved; meanwhile, the separation of the intrusion detection system and the protected system is realized based on the separation safety property of the virtual machine; compared with the traditional network intrusion detection system, the safe network intrusion detection system has better safety and reliability.

Description

technical field

[0001] The invention belongs to the fields of computer safety and virtual computing, and is a safety network intrusion detection system suitable for a virtual machine environment. Background technique

[0002] With the development of computer technology and network communication technology, computer network has been popularized rapidly in recent years, and has become an important medium for information exchange and sharing in the whole society, profoundly changing people's work and life style. With the rapid development of computers, the problem of network information security has become increasingly serious, and has become an important factor restricting the development of network and Internet economy. In recent years, cyber attacks and information security incidents have emerged one after another, involving more and more fields, and causing more and more harm.

[0003] Network intrusion detection technology is a kind of network information security technol...

Examples

Embodiment Construction

[0028] The invention utilizes the isolation of the virtual machine, the transparency of the underlying system, and high efficiency to design a network intrusion detection system built on a novel virtual machine architecture. In this system, not only using the structural characteristics of the virtual machine to achieve a more secure and robust intrusion detection system, but also paying great attention to how to use the mature intrusion detection theory to provide a new type of computer based on virtual computing theory The architecture implements security guarantees. The present invention will be described in further detail below in conjunction with the accompanying drawings.

[0029] like figure 1 As shown, the safety net intrusion detection system suitable for virtual machines is mainly divided into two parts in terms of architecture: one part is the intrusion detection part located in the intrusion detection virtual machine 1, including the server-side inter-domain commun...

technical field

[0001] The invention belongs to the fields of computer safety and virtual computing, and is a safety network intrusion detection system suitable for a virtual machine environment. Background technique

[0002] With the development of computer technology and network communication technology, computer network has been popularized rapidly in recent years, and has become an important medium for information exchange and sharing in the whole society, profoundly changing people's work and life style. With the rapid development of computers, the problem of network information security has become increasingly serious, and has become an important factor restricting the development of network and Internet economy. In recent years, cyber attacks and information security incidents have emerged one after another, involving more and more fields, and causing more and more harm.

[0003] Network intrusion detection technology is a kind of network information security technol...

Examples

Embodiment Construction

[0028] The invention utilizes the isolation of the virtual machine, the transparency of the underlying system, and high efficiency to design a network intrusion detection system built on a novel virtual machine architecture. In this system, not only using the structural characteristics of the virtual machine to achieve a more secure and robust intrusion detection system, but also paying great attention to how to use the mature intrusion detection theory to provide a new type of computer based on virtual computing theory The architecture implements security guarantees. The present invention will be described in further detail below in conjunction with the accompanying drawings.

[0029] like figure 1 As shown, the safety net intrusion detection system suitable for virtual machines is mainly divided into two parts in terms of architecture: one part is the intrusion detection part located in the intrusion detection virtual machine 1, including the server-side inter-domain commun...

Images