The invention belongs to the technical field of
virtual machine mirror image static scanning, and particularly relates to a
virtual machine mirror image static scanning method and
system based on a hyper-fusion platform, and the method comprises the steps: creating a to-be-scanned
mirror image storage snapshot, employing an index and
retrieval algorithm, obtaining a static
virtual machine mirror image file, extracting and recording
metadata information of the static virtual
machine mirror image file, and then carrying out integrity
verification; collecting all-around resource data of the hyper-fusion platform in real time, and distributing corresponding resource quotas for scanning tasks by using a preset
algorithm; multi-stage deep scanning is carried out, file fingerprints and
feature matching are firstly used for preliminary screening, then misjudgment is eliminated through version intelligent comparison, potential high-risk vulnerabilities are deeply excavated for key complex components by adopting static code analysis, and configuration files in mirror images are comprehensively examined through rapid screening and positioning of known malicious
software; and a preset
algorithm is used for carrying out deep classification arrangement,
correlation analysis and summary statistics on various types of result data, so that virtual
machine mirror image scanning in a large-scale hyper-fusion cluster is completed in a relatively short time.