File System Monitor based on Virtualization Technology
Zhou An-min · Information Security and Communications Privacy · 2012
In order to improve the accuracy and anti-attack capability of file system monitoring,a virtual machine based framework is proposed,which could monitor the file system out of the guest operation system transparently and in real time,obtain the related information of the monitored host,record and analyze the file operations,and then keep the log to the secure host.Experiment shows that this technology could effectively monitor the file system,ensure the safety of log file,and detect the hidden file by malicious code.