随着云计算的发展,云虚拟主机不仅面临着传统主机的安全问题,也面临着云安全问题.针对漏洞入侵、虚拟主机逃逸等问题,云平台缺乏主机监控方法.Linux系统内核的关键函数位置下插入探测点,在内核层收集所需要的系统进程信息,提出了基于内核Kprobe机制的进程信息监控方案的设计思路及实现方法.以上方案有助于保护云虚拟主机的系统安全和数据安全,完善云平台的监控系统.通过对系统安装应用的前后的系统性能测试,证明设计的进程监控方法占用系统资源较低,从而证实了所设计方案有良好的可行性.
With the development of cloud computing, cloud hosting is not only facing the security problem of traditional host, but also facing problem of cloud security. For vulnerability intrusion, virtual host escapes and other issues, cloud platform absence of host monitoring methods. Because of inserting the probe point in the key positions of the function of the Linux kernel and collecting the required information of system process in the kernel layer, the implementation method and the design process and of the monitoring system information which based on kernel Kprobe mechanism has been proposed. The scheme above can not only be helpful to keep security of the system and data of the cloud virtual host, but also Improve the monitoring system of the cloud platform. Through the system performance testing before and after the installation of application in the system, that the process monitoring method which designed can be proved to Occupy lower system resource, so that the design scheme of the system is proved to have better feasibility.