VMSecDefender: virtual machine malicious processes detection by using GRU
Zhi Chen, Kai Deng, Wenqi Zheng · 2023
Virtual machines in Infrastructure as a Service environment based on a shared responsibility model involves a lot of security vulnerabilities. Virtual machines communicate with others, after a single virtual machine is attacked, the software infrastructure will be threatened by malicious programs. We propose an anomaly detection method for virtual machine malicious processes based on GRU model. This method could collect system call information in the virtual machine in a no-agent way. This detection model is based on GRU, which can detect the abnormal behavior of processes in virtual machines and experiments prove that this method could have a good performance in malicious behavior detection.