Virtual machine data clearing method and device, computer equipment, readable storage medium and program product
By obtaining the range of virtual memory addresses and the range of physical memory when the virtual institution is closed, and the data in the physical memory range is removed, the data leakage of the data leakage after the closure of the virtual institution is solved, and the data security guarantee is achieved.
Patent Information
- Application Number
- CN202411646253.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-18
- Publication Date
- 2025-01-28
Smart Images
Figure CN119376862A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of virtual machine technology, and in particular to a method, device, computer equipment, computer-readable storage medium and computer program product for clearing virtual machine data. Background Art
[0002] With the development of computer technology, virtualization technology has emerged to improve the utilization of computer storage resources. Virtualization technology allows multiple operating systems to run on a single computer, each with its own kernel and user space, meeting the needs for efficient utilization and flexible management of computer resources. However, the existing virtualization technology has the risk that after the virtual machine is shut down, the virtual machine data in the physical memory released by the virtual machine will be retained, resulting in the risk of virtual machine data being leaked. Summary of the invention
[0003] Based on this, it is necessary to provide a virtual machine data clearing method, apparatus, computer device, computer-readable storage medium and computer program product that can reduce the risk of virtual machine data being leaked after the virtual machine is shut down, in response to the above technical problems.
[0004] In a first aspect, the present application provides a method for clearing virtual machine data, the method comprising:
[0005] When receiving a request to shut down the virtual machine from the host machine, obtaining a virtual memory address range of the virtual machine;
[0006] Acquire the host machine physical memory range according to the virtual memory address range;
[0007] Clear the data in the physical memory range of the host machine.
[0008] In one embodiment, obtaining the virtual memory address range of the virtual machine includes:
[0009] Traverse the memory list based on the preset offset to find the target memory block;
[0010] Obtaining the virtual memory start address of the target memory block;
[0011] The virtual memory address range of the virtual machine is obtained according to the virtual memory start address and the first property file.
[0012] In one embodiment, obtaining the virtual memory address range of the virtual machine according to the virtual memory start address and the first property file includes:
[0013] According to the first attribute file, obtaining the virtual memory end address of the target memory block;
[0014] The virtual memory address range of the virtual machine is obtained according to the virtual memory start address and the virtual memory end address.
[0015] In one embodiment, obtaining the host machine physical memory range according to the virtual memory address range includes:
[0016] Acquire a mapping page table according to the second attribute file; the mapping page table is used to represent the mapping relationship between the virtual memory and the physical memory of the host machine;
[0017] The host machine physical memory range is obtained according to the mapping page table and the virtual memory address range.
[0018] In one embodiment, obtaining the host machine physical memory range according to the mapping page table and the virtual memory address range includes:
[0019] For multiple virtual memory addresses within the virtual memory address range, query in the mapping page table according to the virtual page frame number of the virtual memory address to obtain the corresponding physical page frame number;
[0020] Obtaining a corresponding host machine physical memory address according to the physical page frame number and the virtual address offset corresponding to the virtual memory address;
[0021] The host machine physical memory range is determined according to the host machine physical memory address corresponding to each virtual memory address.
[0022] In one embodiment, clearing the data in the physical memory range of the host machine includes:
[0023] A write-zero operation is performed on the physical memory range of the host machine.
[0024] In a second aspect, the present application further provides a virtual machine data clearing device, the device comprising:
[0025] A virtual memory acquisition module is used to acquire the virtual memory address range of the virtual machine when receiving a request to shut down the virtual machine sent by the host machine;
[0026] A physical memory acquisition module, used to acquire a host machine physical memory range according to the virtual memory address range;
[0027] The data clearing module is used to clear the data in the physical memory range of the host machine.
[0028] In a third aspect, the present application further provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following is achieved:
[0029] When receiving a request to shut down the virtual machine from the host machine, obtaining a virtual memory address range of the virtual machine;
[0030] Acquire the host machine physical memory range according to the virtual memory address range;
[0031] Clear the data in the physical memory range of the host machine.
[0032] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following is implemented:
[0033] When receiving a request to shut down the virtual machine from the host machine, obtaining a virtual memory address range of the virtual machine;
[0034] Acquire the host machine physical memory range according to the virtual memory address range;
[0035] Clear the data in the physical memory range of the host machine.
[0036] In a fifth aspect, the present application further provides a computer program product, including a computer program, which, when executed by a processor, implements:
[0037] When receiving a request to shut down the virtual machine from the host machine, obtaining a virtual memory address range of the virtual machine;
[0038] Acquire the host machine physical memory range according to the virtual memory address range;
[0039] Clear the data in the physical memory range of the host machine.
[0040] In the above-mentioned virtual machine data clearing method, apparatus, computer equipment, readable storage medium and computer program product, upon receiving a request to shut down the virtual machine sent by the host machine, the virtual memory address range of the virtual machine is obtained, the physical memory range of the host machine is obtained according to the virtual memory address range, and the data in the physical memory range of the host machine is cleared. This achieves active clearing of data in the physical memory of the host machine released by the virtual machine when shutting down the virtual machine, thereby reducing the risk of virtual machine data being leaked after the virtual machine is shut down. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.
[0042] Figure 1 A diagram of an application environment of a method for clearing virtual machine data in an embodiment;
[0043] Figure 2 A schematic diagram of a flow chart of a method for clearing virtual machine data in one embodiment;
[0044] Figure 3 A schematic diagram of a process of obtaining a virtual memory address range of a virtual machine in one embodiment;
[0045] Figure 4 A schematic diagram of a process of obtaining a host machine physical memory range according to a virtual memory address range in one embodiment;
[0046] Figure 5 A schematic diagram of a process of obtaining a host machine physical memory range according to a mapping page table and a virtual memory address range in one embodiment;
[0047] Figure 6 A structural block diagram of a virtual machine data clearing device in one embodiment;
[0048] Figure 7 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION
[0049] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0050] The virtual machine data clearing method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the host machine can be a physical server or other computer device with a memory installed, on which a Linux operating system, a Mac operating system, a Windows operating system or other operating systems can be installed. A virtual machine monitor (Virtual Machine Monitor, VMM) is installed on the host machine, and the VMM is responsible for creating and managing the virtual environment and providing virtual machines (VirtualMachine, VM). The physical memory of the virtual machine is the memory resource divided from the physical memory of the host machine. The virtual memory may be composed of multiple physical memory fragments of the host machine, or part of it may be stored on an external disk storage. There is an address mapping mechanism between the virtual memory and the physical memory of the host machine.
[0051] In one embodiment, Figure 2 As shown, the virtual machine data clearing method provided in the present application includes steps S210-S230.
[0052] S210, when a request to shut down a virtual machine is received from a host machine, a virtual memory address range of the virtual machine is obtained.
[0053] When the application of the virtual machine is executed, the operating system will allocate a virtual address for each process and record it in the configuration information of the virtual machine. When the VMM receives a request to shut down the virtual machine sent by the host machine, it can obtain the virtual memory address range of the VMM process by querying the configuration information or calling the interface resource.
[0054] S220, obtaining a physical memory range of the host machine according to the virtual memory address range.
[0055] The host physical address is the actual address of the data and instructions stored in the host physical memory. There is an address mapping mechanism between the virtual address and the host physical address, which is usually maintained by the VMM. The VMM can use this address mapping mechanism to convert the virtual address in the virtual memory address range into the host physical address, thereby determining the host physical memory range corresponding to the virtual machine.
[0056] S230, clearing data in the physical memory range of the host machine.
[0057] After determining the host machine physical memory range corresponding to the virtual machine, the VMM can clear the data in the host machine physical memory range. For example, after determining the host machine physical memory range, the VMM can call the host machine's / dev / mem file to find the physical memory corresponding to the host machine physical memory range and clear the data in the physical memory. In the Linux system, the / dev / mem file is a full image of the host machine's physical memory and can be used to access the host machine's physical memory.
[0058] In an embodiment of the present application, when a request to shut down the virtual machine is received from the host machine, the virtual memory address range of the virtual machine is obtained, the physical memory range of the host machine is obtained according to the virtual memory address range, and the data in the physical memory range of the host machine is cleared. This allows the data in the physical memory of the host machine corresponding to the virtual machine to be actively cleared when the virtual machine is shut down, thereby reducing the risk of data leakage in the physical memory released by the virtual machine after the virtual machine is shut down.
[0059] In one embodiment, Figure 3 As shown, obtaining the virtual memory address range of the virtual machine includes steps S310-S330.
[0060] S310, traverse the memory list based on the preset offset to find the target memory block.
[0061] The memory list can be in the form of an array or a linked list, and each element thereof contains information about the memory block, such as the size of the memory block and the starting address of the virtual address. The VMM can obtain the memory list by calling the software interface in the virtual environment. The target memory block refers to the memory block that represents the beginning of the physical memory of the virtual machine operating system. The preset offset refers to the offset of the physical address of the virtual machine compared to the reference point. Exemplarily, "offset" is defined as the preset offset, and the VMM can traverse the memory list to find the memory block with "offset" of "0", that is, the target memory block.
[0062] S320, obtaining the virtual memory start address of the target memory block.
[0063] The VMM can obtain the virtual memory start address of the target memory block by querying the memory information in the memory list.
[0064] S330: Obtain a virtual memory address range of the virtual machine according to the virtual memory start address and the first attribute file.
[0065] Specifically, the virtual memory end address of the target memory block may be obtained first according to the first attribute file, and then the virtual memory address range of the virtual machine may be obtained according to the virtual memory start address and the virtual memory end address.
[0066] The first attribute file stores the virtual memory area of the virtual machine process and its attribute information, such as the virtual memory start address, virtual memory end address, read and write permissions, offset, device number, process ID (PID), storage path and other information. Exemplarily, the first attribute file is the / proc / pid / maps file. The VMM can call and query the first attribute file through software commands, find the memory area in the first attribute file that matches the virtual memory start address of the target memory block, and record the virtual memory end address of the memory area, thereby obtaining the virtual memory address range of the virtual machine.
[0067] In this embodiment, the target memory block is found by traversing the memory list based on a preset offset, the virtual memory starting address of the target memory block is obtained, and the virtual memory address range of the virtual machine is obtained based on the virtual memory starting address and the first attribute file, so as to facilitate the subsequent accurate finding of the host machine physical memory corresponding to the virtual machine through the virtual memory address.
[0068] In one embodiment, Figure 4 As shown, obtaining the host machine physical memory range according to the virtual memory address range includes steps S410-S420.
[0069] S410, obtaining a mapping page table according to the second attribute file. The mapping page table is used to represent the mapping relationship between the virtual memory and the physical memory of the host machine.
[0070] The operating system or VMM usually uses a mapping page table to manage the mapping relationship between virtual memory and the physical memory of the host machine. The page table is a data structure, usually a 2-level or 3-level tree structure. Each process in the VMM has its own mapping page table, which contains the mapping relationship between the virtual page frame number and the physical page frame number. The virtual page frame number is a part of the virtual memory address and is used to locate the corresponding item in the mapping page table. The physical page frame number indicates the location of the actual storage page. The second attribute file stores detailed information about the mapping page table, including whether the page is mapped, the physical address of the page, the access rights of the page, and other information. Exemplarily, the second attribute file can be a / proc / pid / pagemap file. The / proc / pid / pagemap file is a virtual file that can obtain detailed information about the virtual memory page mapping in the relevant process. The VMM can obtain the mapping page table of the virtual machine by reading the / proc / pid / pagemap file.
[0071] S420, obtaining a host machine physical memory range according to the mapping page table and the virtual memory address range.
[0072] It can be understood that the VMM can map the virtual memory address range to the host machine physical memory range through an address mapping mechanism represented by a mapping page table.
[0073] Specifically, Figure 5 As shown, obtaining the host machine physical memory range according to the mapping page table and the virtual memory address range may include steps S510-S530.
[0074] S510, for multiple virtual memory addresses within the virtual memory address range, query in a mapping page table according to the virtual page frame number of the virtual memory address to obtain a corresponding physical page frame number.
[0075] The VMM may first obtain virtual page frame numbers of multiple virtual memory addresses within the virtual memory address range, query the mapping page table one by one according to the multiple virtual page frame numbers, and obtain corresponding physical page frame numbers.
[0076] S520, obtaining a corresponding host machine physical memory address according to the physical page frame number and the virtual address offset corresponding to the virtual memory address.
[0077] The virtual address offset is a part of the virtual memory address. The virtual address offset can be used to indicate the specific location of the virtual address in the corresponding physical page frame number. The virtual address offset is related to the page size. In the page table structure, the page size defines the size of each page in the mapping page table, which may be 2KB, 4KB, 16KB or other bytes. The calculation formula for the virtual address offset is (virtual address / page size)*8.
[0078] The VMM can combine the obtained physical page frame number with the virtual address offset corresponding to the virtual memory address to obtain the host machine physical memory address.
[0079] S530: Determine a host machine physical memory range according to a host machine physical memory address corresponding to each virtual memory address.
[0080] The host physical memory address corresponding to each virtual memory address constitutes the host physical memory range.
[0081] In this embodiment, the mapping page table is obtained by calling the second property file, the mapping page table is queried based on the virtual page frame number of the virtual memory address to obtain the physical page frame number, and the physical page frame number and the virtual address offset corresponding to the virtual memory address are combined to obtain the host physical memory address, so that the host physical memory range corresponding to the virtual machine can be quickly and accurately obtained.
[0082] In one embodiment, clearing the data in the host machine's physical memory range includes the step of writing zeros to the host machine's physical memory range. It is understood that after determining the host machine's physical memory range corresponding to the virtual machine, the VMM or the operating system can write "0" to the host machine's physical memory range to actively clear the data in the physical memory released after the virtual machine is shut down.
[0083] For better explanation, a more specific embodiment is listed to illustrate the virtual machine data clearing method of the present application.
[0084] First, after the VMM receives the request to shut down the virtual machine sent by the host, it can preset the target memory block with an offset of "0" in the memory list, and then call the configuration information of the target memory block to obtain the virtual address starting address of the target memory block. Secondly, read the / proc / pid / maps file in the VMM process, and find the virtual memory address range corresponding to the virtual machine according to the virtual address starting address of the target memory block. Then, read the / proc / pid / pagemap file of the VMM process, obtain all corresponding physical page frame numbers according to the virtual memory address range, and obtain the host physical memory address according to the physical page frame number, page size and corresponding virtual address offset, so as to obtain the host physical memory range corresponding to the virtual machine. After that, the VMM can open the / dev / mem file of the host, use the obtained host physical memory range as the offset, write "0" to the corresponding physical memory, clear the data in the physical memory, and avoid data leakage after the virtual machine is shut down.
[0085] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.
[0086] Based on the same inventive concept, the embodiment of the present application also provides a virtual machine data clearing device for implementing the virtual machine data clearing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more virtual machine data clearing device embodiments provided below can refer to the limitations of the virtual machine data clearing method above, and will not be repeated here.
[0087] In an exemplary embodiment, Figure 6 As shown, a virtual machine data clearing device is provided, including: a virtual memory acquisition module 610, a physical memory acquisition module 620 and a data clearing module 630, wherein:
[0088] The virtual memory acquisition module 610 is used to acquire the virtual memory address range of the virtual machine when receiving a request to shut down the virtual machine sent by the host machine;
[0089] The physical memory acquisition module 620 is used to acquire the host machine physical memory range according to the virtual memory address range;
[0090] The data clearing module 630 is used to clear the data in the physical memory range of the host machine.
[0091] In an embodiment of the present application, when a request to shut down the virtual machine is received from the host machine, the virtual memory acquisition module 610 obtains the virtual memory address range of the virtual machine, the physical memory acquisition module 620 obtains the physical memory range of the host machine based on the virtual memory address range, and the data clearing module 630 clears the data in the physical memory range of the host machine, thereby realizing active clearing of data in the physical memory released by the virtual machine when shutting down the virtual machine, thereby reducing the risk of data leakage after the virtual machine is shut down.
[0092] In one embodiment, the virtual memory acquisition module is also used to traverse the memory list based on a preset offset to find the target memory block, obtain the virtual memory starting address of the target memory block, and obtain the virtual memory address range of the virtual machine based on the virtual memory starting address and the first attribute file.
[0093] In one embodiment, the virtual memory acquisition module is further used to acquire the virtual memory end address of the target memory block according to the first attribute file, and acquire the virtual memory address range of the virtual machine according to the virtual memory start address and the virtual memory end address.
[0094] In one embodiment, the physical memory acquisition module is further used to acquire a mapping page table according to the second attribute file, and acquire a physical memory range of the host machine according to the mapping page table and the virtual memory address range.
[0095] In one embodiment, the physical memory acquisition module is also used to query the mapping page table for multiple virtual memory addresses within the virtual memory address range according to the virtual page frame number of the virtual memory address, obtain the corresponding physical page frame number, obtain the corresponding host physical memory address according to the physical page frame number and the virtual address offset corresponding to the virtual memory address, and determine the host physical memory range according to the host physical memory address corresponding to each virtual memory address.
[0096] In one embodiment, the data clearing module is further used to perform a write-zero operation on the physical memory range of the host machine.
[0097] Each module in the above-mentioned virtual machine data clearing device can be implemented in whole or in part by software, hardware or a combination thereof. Each of the above-mentioned modules can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.
[0098] In an exemplary embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. Figure 7As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store memory data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a virtual machine data clearing method is implemented.
[0099] Those skilled in the art will understand that Figure 7 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0100] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the method for clearing virtual machine data provided in any of the above embodiments is implemented.
[0101] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the method for clearing virtual machine data provided in any of the above embodiments is implemented.
[0102] In one embodiment, a computer program product is provided, including a computer program, which, when executed by a processor, implements the virtual machine data clearing method provided in any of the above embodiments.
[0103] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.
[0104] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.
[0105] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.
Claims
1. A method for clearing virtual machine data, characterized in that: The method comprises: When receiving a request to shut down the virtual machine from the host machine, obtaining a virtual memory address range of the virtual machine; Acquire the host machine physical memory range according to the virtual memory address range; Clear the data in the physical memory range of the host machine.
2. The method according to claim 1, characterized in that The obtaining of the virtual memory address range of the virtual machine includes: Traverse the memory list based on the preset offset to find the target memory block; Obtaining the virtual memory start address of the target memory block; The virtual memory address range of the virtual machine is obtained according to the virtual memory start address and the first property file.
3. The method according to claim 2, characterized in that The step of obtaining the virtual memory address range of the virtual machine according to the virtual memory start address and the first property file includes: According to the first attribute file, obtaining the virtual memory end address of the target memory block; The virtual memory address range of the virtual machine is obtained according to the virtual memory start address and the virtual memory end address.
4. The method according to claim 1, characterized in that The obtaining the host machine physical memory range according to the virtual memory address range includes: Acquire a mapping page table according to the second attribute file; the mapping page table is used to represent the mapping relationship between the virtual memory and the physical memory of the host machine; The host machine physical memory range is obtained according to the mapping page table and the virtual memory address range.
5. The method according to claim 4, characterized in that The obtaining the host machine physical memory range according to the mapping page table and the virtual memory address range includes: For multiple virtual memory addresses within the virtual memory address range, query in the mapping page table according to the virtual page frame number of the virtual memory address to obtain the corresponding physical page frame number; Obtaining a corresponding host machine physical memory address according to the physical page frame number and the virtual address offset corresponding to the virtual memory address; The host machine physical memory range is determined according to the host machine physical memory address corresponding to each virtual memory address.
6. The method according to claim 1, characterized in that The clearing of data in the physical memory range of the host machine includes: A write-zero operation is performed on the physical memory range of the host machine.
7. A virtual machine data clearing device, characterized in that: The device comprises: A virtual memory acquisition module is used to acquire the virtual memory address range of the virtual machine when receiving a request to shut down the virtual machine sent by the host machine; A physical memory acquisition module, used to acquire a host machine physical memory range according to the virtual memory address range; The data clearing module is used to clear the data in the physical memory range of the host machine.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.