A virtual machine migration security policy dynamic configuration system and method

Abstract

The present invention relates to a virtual machine migration security policy dynamic configuration system and method, in which a policy agent module is set on both the source host node and the target host node, the security management center is respectively connected to the security policy library and the policy coordination module, and the policy coordination module is also connected to all The policy agent module is connected; the security management center queries the security policy database to determine whether the intermediate value of the local security policy violates the global security policy, and if it violates, adjusts the intermediate value of the local security policy to the final value of the security policy; otherwise, sets the intermediate value of the local security policy is the final value of the security policy. Since the global security policy is introduced in the process of generating the final value of the security policy, the final value of the security policy cannot violate the global security policy anyway, and the adjustment of the local security policy on the target host node after the virtual machine migration is included in the global security policy planning In order to effectively prevent the reduction of the overall security before and after the migration of the virtual machine.

Description

technical field [0001] The invention relates to an information security system and method, in particular to a virtual machine migration security policy dynamic configuration system and method. Background technique [0002] Cloud computing is an Internet-oriented distributed computing service. As a delivery model for IT resources and services, it can obtain the required resources from a shared pool of configurable computing resources anytime, anywhere, conveniently, and on demand. (such as networks, servers, storage, applications, services, etc.), these resources can be quickly provisioned and released, while minimizing management costs or service provider intervention. In the cloud computing environment, the implementation of security policies faces many difficulties due to the virtualization of the network. Virtualization makes the boundaries of traditional networks blurred. Different networks divided according to virtual machines are no longer restricted by physical networ...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the problem that the overall security of the system cannot be guaranteed when the virtual machine is migrated in the prior art, the present invention proposes a method that can automatically discover the address of the source host node and the address of the target host node for migration, and compare the addresses of the virtual machine before and after migration. The security policy corresponding to the security status of the operating environment is comparatively analyzed, unified coordinated and correspondingly modified to ensure that the security of the whole system remains consistent before and after the migration of the virtual machine; a virtual machine migration security policy dynamic configuration system; and a method for realizing the system

Images