CN105007261A - Security protection method for image file in virtual environment - Google Patents

Abstract

The invention discloses a method for security protection of image files in a virtualized environment, which specifically includes the following contents: obtaining information of virtual machine image files, generating a unique identifier corresponding to the image file, and verifying the identifier and judging when the virtual machine starts Whether the image is legal, if the verification is passed, it will start normally, otherwise, the virtual machine image file will be judged as an illegal image, and the structure of the image file will be destroyed by a certain method, so that it cannot be started. It should be noted that the behavior of destroying the image file is reversible, that is, the damaged image file can be repaired. The invention guarantees the security of the image file loaded every time the virtual machine is started, and uses a series of measures such as the uniqueness of the generated logo and the destruction of illegal image files to effectively protect the image file, thereby improving the security of the entire system. security.

Description

A security protection method for image files in a virtualized environment

technical field

The invention belongs to the field of cloud computing, and more specifically relates to a security protection method for image files in a virtualized environment.

Background technique

Cloud computing represents a new business computing model. There are still many uncertainties in its practical application in various aspects, and it faces many security challenges. Among them, the problem of user data security in the cloud platform is particularly prominent, mainly in the following aspects: the efficiency of virtualization in the cloud requires the virtual machines of multiple organizations to coexist on the same physical resource. While traditional data center security still applies to cloud environments, physical isolation and hardware-based security cannot protect against attacks between virtual machines on the same server. Management access is via the Internet, rather than the controlled and limited direct or on-site connections that have persisted in traditional data center models. This increases the risk and exposure of local virtual machine images and disk files, and will require close monitoring of changes to system controls and access control restrictions.

Contents of the invention

Aiming at the deficiencies in data security in the current cloud environment, the purpose of the present invention is to provide a security protection method for image files in a virtualized environment, aiming at strengthening the protection of user data security on the current basis, and also enabling security checks every time a user Occurs when the virtual machine is started for the first time, which improves the compulsion and accuracy of the verification, and at the same time prevents the unsafe virtual machine from starting at the first time, thereby improving the overall security level of the system.

In order to achieve the above object, the present invention provides a security protection method for image files in a virtualized environment, comprising the following steps:

(1) Obtain the basic information of the image file to be protected, including file name, file type, file size and file creation time;

(2) extracting the non-text information in the basic information of the mirror image file, and combining these information according to a preset order to form the final valid information, and generating a unique identifier corresponding to the mirror image file according to the valid information;

(3) After obtaining the corresponding identification of the image file, carry out the binding of the image file and its corresponding identification;

(4) When the virtual machine starts to load the image file, the image file is checked for legality according to the image file corresponding to the image file. If the image file has been bound with an ID and the ID is legal, the image file is normally loaded and the virtual machine is started; Otherwise, the virtual machine is considered illegal, and the virtual machine image file is locked and prevented from starting.

In an embodiment of the present invention, the generation method of the identification in the step (2) is secret, and the generated identification is unique.

In an embodiment of the present invention, the identification generation method is: using a public signature algorithm, or designing an algorithm by itself.

In one embodiment of the present invention, the binding of the image file and its corresponding identifier in the step (3) specifically includes: using database technology to bind the image file and its corresponding identifier, or writing the identifier into any position of the image file.

In an embodiment of the present invention, writing the identifier into any position of the image file specifically includes: writing the identifier into the end of the image file, or storing the identifier in the image file in a hashed form.

In one embodiment of the present invention, the legality check of the image file in the step (4) specifically includes: checking whether the image file has been bound with a corresponding identifier, and generating the image file by the method in step (2) The corresponding identifier of the newly generated corresponding identifier is verified to be consistent with the corresponding identifier in the image file.

In one embodiment of the present invention, the method also includes:

(5) When judging that the virtual machine is illegal, prevent the illegal virtual machine from starting by destroying the image file structure.

In an embodiment of the present invention, the method for destroying the structure of the image file specifically includes: rewriting the file header of the image file.

In one embodiment of the present invention, the destruction of the image file is reversible, that is, the administrator can XOR and rewrite the first 128 bytes of the image file header again, so that the damaged virtual machine image file can be restored, so that it can load normally again.

Through the above technical solutions conceived by the present invention, compared with the prior art, the present invention has the following beneficial effects:

(1) Since the identification generation method used in step (3) is flexible and changeable, administrators can update it regularly to eliminate outdated algorithms and use more secure and efficient signature algorithms.

(2) Since the verification process used in step (4) is realized by modifying the source code of the virtualization system and recompiling and installing, the verification process is mandatory and cannot be bypassed. It will be executed before the virtual machine, that is, the validity of the virtual machine will be checked every time the virtual machine is turned on.

(3) The user cannot pass the verification by directly copying the logo. The reason is as follows: the logo of the image file is generated according to the attribute information of the corresponding file, and they are unique. These file attributes include but are not limited to the file name, File size, creation time, etc. Therefore, the generated identification also has the characteristic of uniqueness.

(4) In step (5), the destruction of the illegal image file can be executed immediately when the verification fails, so it will take effect when the virtual machine is started this time, that is, the startup fails, and this step prevents it from destroying the file structure. If it is loaded, the user cannot recover it by itself, unless the corresponding recovery program is used to unlock the image file so that it can be loaded normally.

Description of drawings

FIG. 1 is a flow chart of a method for protecting an image file in a virtualized environment in the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

As shown in Figure 1, the safety protection method of image file under the virtualization environment among the present invention comprises the following steps:

(1) Obtain the basic information of the image file to be protected, including but not limited to the file name, file type, file size, and file creation time. These information can uniquely represent the image file and serve as the basis for generating the image file identification in the next step.

(2) Extract the non-text information in the basic information of the image file obtained before, and combine these information according to the preset order to form the final valid information, and generate the unique identifier corresponding to the image file according to the valid information.

Among them, the generation method of the logo is secret and not limited: you can use a public signature algorithm, or design an algorithm yourself, as long as you only need to ensure that the generated logo is unique and irreversible.

(3) After obtaining the corresponding identifier of the image file, the image file is bound to the corresponding identifier.

Among them, there are various ways to bind the logo to the image file, including but not limited to the following methods: use database technology to bind the mirror file with its corresponding logo, or write the logo to any position of the mirror file, such as the end of the mirror file , or the hash is stored in the image file, etc.

(4) When the virtual machine is started and the image file is loaded, the image file is checked for legality according to the image file corresponding to the image file. If the image file is bound with an ID and the image file is legal, the image file is loaded normally and the virtual machine is started. ; Otherwise, the virtual machine is considered illegal, and the image file of the virtual machine is locked and prevented from starting.

Specifically, a function module for verifying the identity of the image file can be added to the virtualization system by modifying the source code of the virtualization system.

The verification process is mandatory and cannot be bypassed. The verification will be performed before each virtual machine is started, that is, the validity of the virtual machine will be checked every time the virtual machine is started. The main function of this module is to verify whether the image file has been bound to the corresponding identifier, and verify whether the specific image file identifier is consistent and legal by simulating the process of generating the image file identifier before.

(5) Prevent the startup of the illegal virtual machine by destroying the image file structure, that is, rewrite the file header of the image file, XOR and rewrite the first 128 bytes of the file header, so that it cannot be read correctly when loading the image file file header information, thereby preventing the virtual machine from starting.

It should be noted that the damage to the image file is reversible, that is, the administrator can XOR and rewrite the first 128 bytes of the image file header again, so that the damaged virtual machine image file can be restored so that it can Load normally again.

In addition, for the illegal image file that fails the verification, its file structure should be destroyed immediately, that is, the image file is locked so that it cannot be started normally, unless it is unlocked through an additional recovery program, the image file can be loaded normally and the virtual machine can be started.

It is easy for those skilled in the art to understand that the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention, All should be included within the protection scope of the present invention.

Claims (10)

1. an image file safety protecting method under virtualized environment, comprises the following steps:

(1) obtain the essential information of the image file needing protection, comprise filename, file type, file size and file creation time;

(2) extract the non-legible information in the essential information of described image file, and these information are formed final effective information according to preset order combination, generate unique identification corresponding to this image file according to effective information;

(3), after obtaining the correspondence mark of image file, the image file binding that identify corresponding to it is carried out;

(4) when virtual machine activation load images file, the mark corresponding to this image file carries out validity checking to this image file, if this image file binding logo and identify legal, normal load image file also starts virtual machine; Otherwise think that this virtual machine is illegal, lock this virtual machine image file and stop it to start.

2. method according to claim 1, is characterized in that, in described step (2), the generating mode of mark is secret, and the mark generated is unique.

3. method according to claim 2, is characterized in that, the generation method of described mark is: use public signature algorithm, or designed, designed algorithm.

4. method according to claim 1 and 2, it is characterized in that, in described step (3), the image file binding that identify corresponding to it specifically comprises: corresponding to image file and its mark is bound by usage data storehouse technology, maybe by any position of mark write image file.

5. method according to claim 4, is characterized in that, described any position by mark write image file specifically comprises: mark is write image file end, or being stored in image file of hash.

6. method according to claim 1 and 2, it is characterized in that, carry out validity checking to this image file in described step (4) specifically to comprise: whether verification image file has bound corresponding mark, and generated the correspondence mark of this image file by the method in step (2), verify newly-generated this correspondence identify whether identify with corresponding in image file consistent legal.

7. method according to claim 1 and 2, is characterized in that, described method also comprises:

(5) when judging that this virtual machine is illegal, the startup of illegal virtual machine is stoped by the method destroying image file structure.

8. method according to claim 7, is characterized in that, the method for described destruction image file structure is specially: the file header rewriteeing image file.

9. method according to claim 8, it is characterized in that, the destruction of described image file is reversible, and namely keeper can to the XOR rewriting again of 128 bytes before image file head, disrupted virtual machine image file can be recovered, make it can normal load again.

10. method according to claim 7, it is characterized in that, to the illegal image file verified unsuccessfully, destroy its file structure immediately, namely this image file is locked, make it normally not start, after unlocking except by extra recovery routine, this image file ability normal load also starts virtual machine.