支持多种虚拟化技术的进程非代理监控方法

Agent-free processes monitoring method supporting various virtualization technologies

为保障云环境中虚拟机应用的安全性与可用性,提出一种能够支持多种虚拟化技术的进程非代理监控方法及主动监控框架.本框架将进程监控点设在虚拟机监视器中,而不在其中安装任何代理,并且支持VMware,Xen和KVM三种虚拟化技术,实现了对客户操作系统(Guest OS)的隐藏进程检测和进程负载监控,保证虚拟机安全可靠地运行.从被监控虚拟机外部获取活动进程链、遍历线程获得进程列表,进而利用交叉视图技术可检测出隐藏进程;除开活动进程链,加上网络连接信息相关的另两条链表,从中定位到待监控进程,可获得进程负载状况.实验结果表明:本框架能有效地检测出系统中的隐藏进程,并且准确获取特定进程的负载信息.

For the security and availability of applications in virtual machines in the cloud environ-ment ,an agent-free processes monitoring method was proposed ,which can support various virtualiza-tion technologies and a monitoring framework .The monitoring points of the framework were located outside the virtual machine to be monitored ,and no agent was involved in .Our framework can sup-port three virtualization technologies of VMware ,Xen and KVM ,and realizes the hidden processes detection and process load monitoring of the Guest OS to ensure the virtual machine ’s security and re-liability .Active process chain was got from outside the virtual machine to be monitored ,and thread was traversed to get the list of processes .Thus taking advantage of the cross-view technology ,a hid-den process can be found .Except for the active processes chain ,two linked lists related to network connection information can be added to obtain process loading information . After positioning the process from the lists ,the process load conditions can be got .The experimental results show that the proposed framework can detect hidden processes effectively and efficiently ,and obtain the specific process load information accurately .