Virtual machine trusted security enhancement method and system

• Main Authors: LYU HUAHUI, LI PANDENG, WANG HUIPENG, ZHANG YUNAN, YANG YIWEI, XU AIDONG, LIANG ZHAOKAI, HONG CHAO, KUANG XIAOYUN, YANG HANG
• Format: Patent
• Language: Chinese; English
• Published: 07.04.2023
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC DIGITAL DATA PROCESSING; PHYSICS

The invention provides a trusted security enhancement method and system for a virtual machine, and the method comprises the steps: obtaining a file, and protecting the integrity of the file; performing static credibility verification on the file; performing dynamic credibility verification on the file; and after the process is loaded, protecting the process. Static credible verification, dynamic credible verification, file integrity protection, file credible verification and process protection of the application program are realized, so that the virtual machine has a complete credible computing function and active immunity, a safe and credible virtual machine operation environment is constructed, and attack and invasion of unknown vulnerabilities, Trojan horses and viruses are effectively prevented. 本发明提供的一种虚拟机可信安全增强方法及系统，方法包括获取文件，并对所述文件的完整性保护；对所述文件进行静态可信验证；对所述文件进行动态可信验证；进程加载后，对所述进程进行保护。实现对应用程序的静态可信验证、动态可信验证、文件完整性保护、文件可信验证、进程保护，从而使虚拟机具备完整可信计算功能和主动免疫能力，构建安全可信的虚拟机运行环境，有效防止未知漏洞、木马和病毒的攻击和入侵。