Virtual machine credible evidence collection method and virtual machine credible evidence collection device based on cloud computing platform network

Abstract

The invention discloses a virtual machine credible evidence collection method and a virtual machine credible evidence collection device based on a cloud computing platform network. The method comprises the steps as follows: providing a collection item and task scheduling and rule configuration interface for a user based on a browser, saving configuration information to a database, and starting a task instruction; parsing out a task according to the task instruction, scheduling and distributing collection items, sending a collection instruction to a virtual machine, and preprocessing responded data; calculating and matching the cached data and rule configuration information, filtering and merging duplicate data and redundant data respectively, and matching alarm rules; persistently saving the cached data, the filtered and merged data and the alarm data after alarm rule matching; and getting the saved data based on defined query conditions, and visually displaying the data. The method and the device are based on a variety of data communication protocols, can be used to get all kinds of information about a virtual machine under the condition that a virtual network is isolated or not isolated, and have certain application value.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for collecting credible evidence of a virtual machine based on a cloud computing platform network. Background technique [0002] Cloud computing is an important form of information infrastructure and application service mode in the Internet era, and it is an inevitable trend of the intensive, large-scale and professional development of the new generation of information technology. It provides high-efficiency, low-cost, and low-power computing and data services with resource aggregation and virtualization, application services and specialization, on-demand supply, and flexible use of service models to support various information-based applications and provide future Work, life, production methods and business models have brought about tremendous changes. [0003] However, as a new computing resource utilization method, cloud computing is still developing, an...

AI Technical Summary

Problems solved by technology

[0009] Purpose of the invention: To solve the technical problem that the existing cloud computing management platform obtains a single data source and cannot obtain virtual machine information under the condition of network isolation, to provide a trusted evidence collection method and device for virtual machines under the cloud computing platform network Under the support of cloud computing platform, based on various data communication protocols, it can collect and store configuration information, operation information, network traffic and other data of network-isolated or non-network-isolated virtual machines

Images