Research and implementation of security tools based on virtualization application

Research and implementation of security tools based on virtualization application

Beijing posts and Telecommunications Zhao

With the development of cloud computing, the development of virtualization technology is more and more rapid. Virtualization security is critical, so virtualization security tools are an important guarantee for virtualization applications. However, with the development of virtualization technology, the solution is increasing, the function and complexity are increasing, and the security under the virtual environment is under increasing pressure. The characteristics of virtualization technology itself determine the difference between virtual machines and general host security. The most important feature of virtualization is the emulation of a real host, which relies on the presence of a physical host, so that its security takes into account both the internal security of the virtual machine as well as the external security of virtualization, thus increasing the security challenges of virtualization applications. This article starts with the security of virtualization, this paper introduces the requirements of security tools and the ossec of open source security products, and based on the advantages of isolation, security and virtual machine communication mechanism in virtualized environment, combines virtualization platform with intrusion protection technology, proposes a framework to ensure the internal security of virtual machines, The security system based on virtualization and the solution to ensure the security of the system are given, the security tool Vmhids based on virtualization platform is realized, and a kind of network communication is realized by using the shared memory between virtual machines, which solves the resource utilization and overhead of the internal installation security software of virtual machine. Instead of the traditional host-based client/server architecture, it can meet the security detection within each virtual machine in a virtualized environment, as well as minimize the performance of the virtual machine, and implement the prototype system based on the virtual machine security tool by modifying the OSSEC source code. In this paper, the frame structure of the whole system and the technical realization of each key link are expounded, finally, the system is tested from the angle of function and the angle of performance, the result shows that the system can solve the security and performance balance well in the virtualization situation.

Research and implementation of security tools based on virtualization application