CN111966458A - A security management method for virtual cloud desktop - Google Patents

Abstract

The invention discloses a security management method for a virtual cloud desktop, including one or more of the following security management methods; virtual machine manager security management: acquiring preset types of monitoring and audit log information in a virtual desktop management server, And generate tamper-proof audit information based on monitoring and audit log information; virtual machine security isolation: separate virtual machines, storage devices, and networks; virtual machine residual data protection: virtual machine memory and virtual machine disk residual data respectively. Clear; virtual machine security communication management: encrypt data transmission between subsystems of the virtualization platform system; virtual machine anti-denial of service attack: assign an independent virtual switch to each virtual machine, and each virtual machine switch is bound to Specify a physical network port. The invention improves the security performance of the virtual cloud desktop.

Description

A security management method for virtual cloud desktop

technical field

The invention relates to a security management method for a virtual cloud desktop.

Background technique

In the field of computer applications, desktop PCs are the most common and important office equipment. In actual operation, the disadvantages of its security and management are increasingly exposed, mainly as follows: 1) It is difficult to protect the security boundary; 2) It is difficult to prevent data leakage; 3) Security loopholes emerge in an endless stream; 4) The total cost of ownership is high; 5 ) resource utilization efficiency is low.

SUMMARY OF THE INVENTION

The purpose of the present invention is to overcome the deficiencies of the prior art and provide a security management method for virtual cloud desktops.

The object of the present invention is achieved through the following technical solutions: a security management method for virtual cloud desktop, including virtual machine manager security management, virtual machine security isolation, virtual machine residual data protection, virtual machine security communication management and virtual machine Resist one or more of denial of service attacks;

Virtual machine manager security management: Obtain the monitoring and auditing log information of preset types in the virtual desktop management server, and generate tamper-proof auditing information according to the monitoring and auditing log information;

Virtual machine security isolation: separate virtual machines, storage devices and networks for security isolation;

Virtual machine residual data protection: respectively clear the residual data of the virtual machine memory and virtual machine disk;

Virtual machine security communication management: Encrypt data transmission between subsystems of the virtualization platform system;

Virtual machine resists denial of service attacks: each virtual machine is assigned an independent virtual switch, and each virtual machine switch is bound to a physical network port.

Preferably, the virtual machine manager security management includes:

Extract the mandatory access control unauthorized information after reading the mandatory access control log file;

Read system user login log files to form audit logs;

Call the interface of the virtual machine monitor to obtain the running monitoring data;

Call the interface of the virtual machine monitor to obtain its version and characteristic value information, and then generate tamper-proof audit information.

Preferably, the virtual machine security isolation includes:

Virtual machine running isolation: For multiple virtual machines created on the same physical host, separate physical resources are allocated to each virtual machine;

Virtual machine CPU isolation: The virtualization platform system makes the virtual machine operating system run on the Ring1 of the CPU, and the execution and context switching of its virtual processor instructions are uniformly scheduled by the virtualization platform system;

Virtual machine memory isolation; the virtualization platform system is set to use only memory exclusive mode;

Virtual machine network isolation: network isolation between different virtual machines on the same physical host;

Virtual machine storage isolation: The virtual machine is set to only access the storage space allocated to the virtual machine, and a virtual machine disk can only be mounted by one virtual machine at a time.

Preferably, the protection of the residual data of the virtual machine includes:

Memory residual data clearing: After a virtual machine is stopped or migrated, and before its memory space is released or reassigned to other virtual machines, reset and clear the memory space of the virtual machine;

Disk residual data clearing: After a virtual machine is deleted, before the disk storage space of the virtual machine is released or reassigned to other virtual machines, the disk storage space of the virtual machine is cleared by writing zero.

Preferably, the security management method for the virtual cloud desktop further includes virtual machine security migration management:

When the host server is registered with the virtualization platform system, the virtualization platform system invokes the authentication system according to the information of the host server to generate the device signature digital certificate of the host server from the root certificate, and sends the device signature digital certificate to the host server;

During the virtual machine migration operation, the source server that generated the migration operation initiates a connection request, and establishes an encrypted connection channel between the source server and the target server;

After receiving the connection request from the source server, the target server verifies the device signature digital certificate of the source server: if the verification passes, the source server uses the encrypted connection channel to perform the virtual machine migration operation; if the verification fails, Then the target server rejects the connection request and interrupts the virtual machine migration operation.

Preferably, the security management method for the virtual cloud desktop further includes virtual machine anti-escape monitoring: using mandatory access control and multi-category security to perform virtual machine anti-escape and virtual machine escape monitoring.

The beneficial effects of the present invention are:

(1) The present invention provides a variety of security management methods such as virtual machine manager security management, virtual machine security isolation, virtual machine residual data protection, virtual machine security communication management, and virtual machine anti-denial of service attacks, etc., which improves the performance of virtual cloud desktops. safety performance;

(2) In the present invention, each virtual machine can obtain relatively independent physical resources, and the crash of a certain virtual machine does not affect the virtual machine manager and other virtual machines;

(3) In the present invention, the virtualization platform system makes the virtual machine operating system run on the Ring1 of the CPU, and the execution and context switching of the virtual processor instructions are uniformly scheduled by the virtualization platform system, thereby effectively preventing the virtual machine from directly executing CPU privileged instructions ensure the isolation of virtual processor instructions and processing performance between different virtual machines;

(4) The present invention provides the function of protecting the memory of the virtual machine and storing the remaining information, and the useful information cannot be detected in the newly started virtual machine, which effectively guarantees the safety of the remaining information of the user;

(5) In the present invention, an independent virtual switch is allocated to each virtual machine, and each virtual machine switch is bound to a physical network port, so that the security protection mechanisms such as hardware firewalls in the existing physical network environment can be used to protect the virtual machine. Monitor network data to avoid denial of service attacks.

Description of drawings

Fig. 1 is the composition schematic diagram of the security management method of virtual cloud desktop;

Figure 2 is a schematic diagram of virtual machine manager security management;

FIG. 3 is a schematic diagram of a virtual machine security isolation logic;

Figure 4 is a schematic diagram of virtual machine network isolation;

5 is a schematic diagram of a process of eliminating residual information in memory;

Fig. 6 is a schematic diagram of a process of removing residual information of a disk;

FIG. 7 is a schematic diagram of virtual machine resisting denial of service attack;

FIG. 8 is a schematic diagram of virtual machine migration.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts shall fall within the protection scope of the present invention.

1-8, the present invention provides a security management method for a virtual cloud desktop:

As shown in Figure 1, a security management method for virtual cloud desktop includes one of virtual machine manager security management, virtual machine security isolation, virtual machine residual data protection, virtual machine security communication management and virtual machine anti-denial of service attack. one or more.

The virtual machine manager security management includes: acquiring preset types of monitoring and auditing log information in the virtual desktop management server, and generating tamper-proof auditing information according to the monitoring and auditing log information. As shown in Figure 2, each host server needs to install the VSIP Agent program. The Agent program regularly obtains various monitoring and audit log information and sends them to the VSIP master server, which saves the data to the database.

Specifically, the virtual machine manager security management includes:

Extract the mandatory access control unauthorized information after reading the mandatory access control (MAC) log file;

Read system user login log files to form audit logs;

Call the interface of the virtual machine monitor (Hypervisor) to obtain the running monitoring data (the running monitoring data includes CPU information, memory information, etc.);

Call the interface of the virtual machine monitor to obtain its version and characteristic value information, and then generate tamper-proof audit information.

The virtual machine security isolation includes: respectively performing security isolation on the virtual machine, the storage device and the network, including virtual machine running isolation, virtual machine CPU isolation, virtual machine memory isolation, virtual machine network isolation and virtual machine storage isolation. The logical schematic diagram of virtual machine security isolation is shown in Figure 3.

Virtual machine running isolation: For multiple virtual machines created on the same physical host, each virtual machine is allocated independent physical resources, so that the crash of a virtual machine does not affect the virtual machine manager and other virtual machines.

Virtual machine CPU isolation: The virtualization platform system makes the virtual machine operating system run on the Ring1 of the CPU, and the execution and context switching of its virtual processor (vCPU) instructions are uniformly scheduled by the virtualization platform system, thus effectively preventing the virtual machine. Direct execution of CPU privileged instructions ensures the isolation of virtual processor instructions and processing performance between different virtual machines.

In the X86 architecture, in order to better support virtualization and protect the execution of instructions in a virtualized environment, the CPU provides 4 different privilege levels for instructions, termed Ring, and the priority is Ring0 (used for run the OS kernel), Ring1 (for OS services), Ring2 (for OS services), Ring3 (for applications).

Virtual machine memory isolation; the virtualization platform system is set to only use the memory exclusive mode to achieve memory isolation between different virtual machines. When the memory space of the physical host is all allocated, no new virtual machine can be created.

Virtual machine network isolation: network isolation between different virtual machines on the same physical host, so that virtual machines cannot receive non-broadcast packets whose destination address is not their own. Non-broadcast packets include non-broadcast packets of protocols such as ICMP, TCP, and UDP. arts. The schematic diagram of virtual machine network isolation is shown in Figure 4.

Virtual machine storage isolation: The virtual machine is set to only access the storage space allocated to the virtual machine, and a virtual machine disk can only be mounted by one virtual machine at a time.

The protection of the residual data of the virtual machine includes: respectively clearing the residual data of the memory of the virtual machine and the disk of the virtual machine.

Memory residual data clearing: After a virtual machine is stopped or migrated, and before its memory space is released or reassigned to other virtual machines, reset and clear the memory space of the virtual machine, such as clearing the memory or writing random irrelevant data. information.

In the prior art, after the application system uses the information in the memory, it will not clean up the used memory. The memory that stores the information is still stored in the memory after the program exits. If an attacker scans the memory, it will be will get the information stored in it. The dynamic allocation of memory in the cloud computing environment is a great threat to security. Many high-level attacks are likely to use the remaining information to obtain sensitive information of other users through extremely complex technologies. In the virtualization platform system, after the user shuts down the virtual machine or migrates the virtual machine, the corresponding virtual machine memory resources will be reclaimed, and the released memory will be written "0", so as to ensure that the newly started virtual machine cannot be detected useful. information. A schematic diagram of the process of eliminating residual information in memory is shown in Figure 5.

Disk residual data clearing: After a virtual machine is deleted, before the disk storage space of the virtual machine is released or reassigned to other virtual machines, the disk storage space of the virtual machine is cleared by writing zero.

As shown in Figure 6, when deleting a virtual machine, the system will first confirm the physical disk volume information corresponding to the virtual disk, and perform bit-wise random data writing and bit-wise all "0" for each disk involved in the virtual machine. And the bitwise all "1" data write operation, through at least seven rounds of forced operation of random data and all "0" and all "1" data, the "clear" operation of the virtual machine disk is completed, and the remaining data of the virtual machine disk is realized. protection of. The system deletes the virtual machine disk and completes the deletion of the virtual machine object data after the protective "clear" destruction of the remaining information on the disk is completed. When other users are allocated to use this block of storage space, they will obtain a "empty" secure disk volume, and cannot obtain any "remaining information" through technical means, effectively ensuring the safety of the remaining information of users.

Virtual machine security communication management: Encrypt data transmission between subsystems of the virtualization platform system.

Virtual machine resists denial-of-service attacks: assign an independent virtual switch to each virtual machine, and each virtual machine switch is bound to a physical network port, so that all network packets entering and outgoing from the virtual machine need to pass through the physical network. The switch performs data exchange, and the virtual machines on the same host server do not need to exchange internal data through the virtual switch. In this way, the security protection mechanisms such as hardware firewalls in the existing physical network environment can be used to monitor the virtual machine network data to avoid The occurrence of anti-denial of service attacks is shown in Figure 7. In addition, the virtualization platform system can also limit the upstream and downstream network traffic of the specified virtual machine, and can also alert the virtual machine with abnormal traffic to remind the administrator to pay attention to whether there is a denial of service attack.

In some embodiments, the security management method for virtual cloud desktop further includes virtual machine security migration management.

Virtual machine security migration management includes:

When the host server is registered with the virtualization platform system, the virtualization platform system invokes the authentication system according to the information of the host server, generates the device signature digital certificate of the host server from the root certificate, and sends the device signature digital certificate (public and private key) to the host. Server; for example, the virtualized platform system issues a device-signed digital certificate for the host server by the existing PKI/CA certification system, and the items that must be included in the template of the device-signed digital certificate are "the computer name of the device and the security level of the device";

During the virtual machine migration operation, the source server that generated the migration operation initiates a connection request, and establishes an encrypted connection channel between the source server and the target server;

As shown in Figure 8, after receiving the connection request from the source server, the target server verifies the device signature digital certificate of the source server: if the verification passes, the source server uses the encrypted connection channel to perform the virtual machine migration operation; If the verification fails, the target server rejects the connection request and interrupts the virtual machine migration operation. During the entire migration process, virtual machine migration data is transmitted over encrypted channels.

In some embodiments, the security management method for a virtual cloud desktop further includes virtual machine anti-escape monitoring: using mandatory access control (MAC) and multi-class security (MCS) to perform virtual machine anti-escape and virtual machine escape monitoring. Among them, mandatory access control enhances the security of the traditional access control list (ACL). In the mandatory access control mode, a security context tag is added to each object, so that in addition to the traditional access control list permissions, the process can also Access to system resources must be authorized by the mandatory access control policy; multi-category security is an enhancement to mandatory access control. Multi-category security extends the sensitivity level tag and A data classification marker for more fine-grained implementation of mandatory access control policies.

When allocating virtual machine resources, the virtualization platform system allocates a random mandatory access control and multi-category security marks to the virtual machine process, the memory space owned by the virtual machine, disk images, network devices and other resources. Under the constraints of virtual machines, virtual machines can only access resources and peripherals such as memory space, disk images, network devices, etc. used for their own virtualization, and cannot escape the restrictions and do not have any permissions to other resources. At the same time, other virtual machines are also forced to Restricted to the virtual machine itself, effectively controlling the escape of the virtual machine.

The foregoing are only preferred embodiments of the present invention, and it should be understood that the present invention is not limited to the forms disclosed herein, and should not be construed as an exclusion of other embodiments, but may be used in various other combinations, modifications, and environments, and Modifications can be made within the scope of the concepts described herein, from the above teachings or from skill or knowledge in the relevant field. However, modifications and changes made by those skilled in the art do not depart from the spirit and scope of the present invention, and should all fall within the protection scope of the appended claims of the present invention.

Claims (6)

1. a security management method of virtual cloud desktop, is characterized in that, comprises one in virtual machine manager safety management, virtual machine safety isolation, virtual machine residual data protection, virtual machine safety communication management and virtual machine anti-denial of service attack. one or more; Virtual machine manager security management: Obtain the monitoring and auditing log information of preset types in the virtual desktop management server, and generate tamper-proof auditing information according to the monitoring and auditing log information; Virtual machine security isolation: separate virtual machines, storage devices and networks for security isolation; Virtual machine residual data protection: respectively clear the residual data of the virtual machine memory and virtual machine disk; Virtual machine security communication management: Encrypt data transmission between subsystems of the virtualization platform system; Virtual machine resists denial of service attacks: each virtual machine is assigned an independent virtual switch, and each virtual machine switch is bound to a physical network port. 2. The security management method of a virtual cloud desktop according to claim 1, wherein the virtual machine manager security management comprises: Extract the mandatory access control unauthorized information after reading the mandatory access control log file; Read system user login log files to form audit logs; Call the interface of the virtual machine monitor to obtain the running monitoring data; Call the interface of the virtual machine monitor to obtain its version and characteristic value information, and then generate tamper-proof audit information. 3. The security management method of a virtual cloud desktop according to claim 1, wherein the virtual machine security isolation comprises: Virtual machine running isolation: For multiple virtual machines created on the same physical host, separate physical resources are allocated to each virtual machine; Virtual machine CPU isolation: The virtualization platform system makes the virtual machine operating system run on the Ring1 of the CPU, and the execution and context switching of its virtual processor instructions are uniformly scheduled by the virtualization platform system; Virtual machine memory isolation; the virtualization platform system is set to use only memory exclusive mode; Virtual machine network isolation: network isolation between different virtual machines on the same physical host; Virtual machine storage isolation: The virtual machine is set to only access the storage space allocated to the virtual machine, and a virtual machine disk can only be mounted by one virtual machine at a time. 4. The security management method of a virtual cloud desktop according to claim 1, wherein the protection of the residual data of the virtual machine comprises: Memory residual data clearing: After a virtual machine is stopped or migrated, and before its memory space is released or reassigned to other virtual machines, reset and clear the memory space of the virtual machine; Disk residual data clearing: After a virtual machine is deleted, before the disk storage space of the virtual machine is released or reassigned to other virtual machines, the disk storage space of the virtual machine is cleared by writing zero. 5. The security management method of a virtual cloud desktop according to claim 1, wherein the security management method of the virtual cloud desktop further comprises virtual machine security migration management: When the host server is registered with the virtualization platform system, the virtualization platform system invokes the authentication system according to the information of the host server to generate the device signature digital certificate of the host server from the root certificate, and sends the device signature digital certificate to the host server; During the virtual machine migration operation, the source server that generated the migration operation initiates a connection request, and establishes an encrypted connection channel between the source server and the target server; After receiving the connection request from the source server, the target server verifies the device signature digital certificate of the source server: if the verification passes, the source server uses the encrypted connection channel to perform the virtual machine migration operation; if the verification fails, Then the target server rejects the connection request and interrupts the virtual machine migration operation. 6. the security management method of a kind of virtual cloud desktop according to claim 1, it is characterized in that, the security management method of virtual cloud desktop also comprises virtual machine anti-escape monitoring: utilize mandatory access control and multi-category security to carry out virtual machine anti-escape Escape and VM escape monitoring.

Images