Virtual machine measurement method and apparatus

Abstract

The invention provides a virtual machine measurement method and apparatus. The method comprises: configuring a to-be-measured file and a white list; constructing a behavior information base corresponding to each piece of white list software located in the white list; by measuring a kernel file and the to-be-measured file in a virtual machine starting process, judging whether the kernel file and the to-be-measured file are trusted; at a set first time interval, obtaining a process currently in a running state and memory information in a virtual machine; according to the process currently in the running state and the memory information, judging whether software located outside the white list runs in the virtual machine; and at a set second time interval, obtaining a software behavior of each piece of white list software in a running state, and by comparison with the corresponding behavior information base, judging whether each piece of white list software runs normally. The apparatus comprises a configuration unit, a construction unit, a first measurement unit, an acquisition unit, a second measurement unit and a third measurement unit. According to the scheme, the security of the virtual machine can be improved.

Description

Technical field [0001] The invention relates to the field of computer security, in particular to a method and device for measuring virtual machines. Background technique [0002] With the continuous development and growth of computer technology, the application range of servers has become more and more extensive. Servers generally use virtualization technology to build multiple virtual machines on a server host, and multiple virtual machines share the physical equipment on the server host. Multiple users use it, and the user performs corresponding data calculation and processing through the virtual machine. Because virtual machines have the characteristics of diversified security threats, high frequency of attacks, and difficulty in detection and prevention, the security of virtual machines is a technical problem that needs to be solved urgently. [0003] At present, the measurement method for virtual machines is mainly to measure the virtual machine image file during the virtual ...

AI Technical Summary

Problems solved by technology

[0004] For the method of measuring the virtual machine in the prior art, the integrity of the virtual machine is only measured before the virtual machine is running, which can only ensure the normal startup of the virtual machine, but after the virtual machine is started, during the running process, the virtual machine The type of running software and the running status of each software are not controlled. Malicious software is likely to damage the virtual machine or steal key user information. Therefore, the security of the virtual machine is low.

Images