Security detection of virtual machine process in private cloud platform
Fengyu Zhao · Jisuanji yingyong yanjiu · 2013
In terms of the network firewall monotone and defects on the security of the private cloud platform,this paper proposed a method(process analysis monitor,PAMon) based on process resource monitoring.Firstly,the virtual machine monitored the physical resources of the virtual machine platform information.Secondly,it reconstructed process resource information through the mapping table.Thirdly,it identified malicious processes by analysis of the key executing processes,hidden ones and those abnormally occupied with resources.Finally,it disposed the identified malicious processes properly.Experiment shows that PAMon can not only detect malicious programs effectively,but also enhance the defense capacity of network firewall by submitting malicious process information to it.