A File Integrity Monitoring System Based on Virtualization
Sha Wen · Journal of Zhongzhou University · 2009
Based on Xen,a virtualization software,this program,namely FSGuard,achieves the function of monitoring file integrity.The operation system(DomU)monitored by this program run in full-virtualization mode,obtaining no information about the existence of VMM.System calls are transparent to the monitored operation system under real-time monitoring of Xen.User-mode program in DomU provides regulation and configuration interfaces for administrators to control the configuration of assigning the list of files in demand for security,and of assigning the access control.Xen has a real-time recording of operations in DomU,and reports the data to administrators.