The invention discloses a
virtual machine peripheral secure mounting method based on deep fingerprints and dynamic
risk control, which is applied to a
host machine virtual machine environment. After the peripherals are accessed, a
daemon process is triggered to obtain VID / PID, descriptors, class
specific function information, instruction
response time sequences and other characteristics, deep fingerprints are constructed, a strategy
library is inquired, and the peripherals are divided into white lists, black lists or unknown devices; automatically mounting the white
list, stopping mounting the
black list and recording an event; and calculating a comprehensive risk value R for unknown equipment, comparing the comprehensive risk value R with a threshold value, and executing automatic mounting, secondary
authentication or mounting prevention. And after mounting, continuously monitoring I / O behaviors, extracting
throughput, an access mode, a burst
time sequence and file semantic features to carry out
anomaly detection, and carrying out transmission pause, alarm and disconnection treatment when the anomaly is detected, so that full-life-cycle safety management and control are realized.