CN110390195B - Method and system for managing and controlling program operation in virtual environment - Google Patents

Method and system for managing and controlling program operation in virtual environment Download PDF

Info

Publication number
CN110390195B
CN110390195B CN201910559238.0A CN201910559238A CN110390195B CN 110390195 B CN110390195 B CN 110390195B CN 201910559238 A CN201910559238 A CN 201910559238A CN 110390195 B CN110390195 B CN 110390195B
Authority
CN
China
Prior art keywords
white list
program
operating system
module
virtual
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910559238.0A
Other languages
Chinese (zh)
Other versions
CN110390195A (en
Inventor
甄鹏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Suzhou Inspur Intelligent Technology Co Ltd
Original Assignee
Suzhou Inspur Intelligent Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Suzhou Inspur Intelligent Technology Co Ltd filed Critical Suzhou Inspur Intelligent Technology Co Ltd
Priority to CN201910559238.0A priority Critical patent/CN110390195B/en
Publication of CN110390195A publication Critical patent/CN110390195A/en
Application granted granted Critical
Publication of CN110390195B publication Critical patent/CN110390195B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/65Updates

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Stored Programmes (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The invention relates to the technical field of server security, and provides a method and a system for managing and controlling program operation in a virtual environment, wherein the method comprises the following steps: when the virtual resource registers for service, a white list in a white list standard library established in advance is issued to the virtual resource; after the white list is issued to the virtual resources, program control log recording and carding are carried out on all program operations except the white list, and release control of the programs except the white list is controlled, so that time cost of virtual resource acquisition programs is saved, and influence of program control on normal services is reduced.

Description

Method and system for managing and controlling program operation in virtual environment
Technical Field
The invention belongs to the technical field of server security, and particularly relates to a method and a system for managing and controlling program operation in a virtual environment.
Background
In a virtualized environment, various heterogeneous operating systems are mixed. The service programs running on the virtualized resources are different, and how to better control the programs in the virtualized resources to run in a controllable range is an important issue in the aspect of virtualized resource security.
Currently, in the technical field of virtual environments, there are many techniques in program management and control, and most methods collect an application program list of each virtualized resource, compare the list with a white list feature value, and control program operation according to a comparison result. However, these program management schemes have two problems: firstly, each virtualized resource acquisition program consumes a large amount of time, and secondly, the virtualized resources can continuously add new service programs, which cannot guarantee that the service programs are released in time.
Disclosure of Invention
Aiming at the defects in the prior art, the invention provides a program operation control method in a virtual environment, and aims to solve the problems that the program control scheme of the virtual environment provided by the prior art is time-consuming and labor-consuming and cannot ensure that a new service is released in time.
The technical scheme provided by the invention is as follows: a method for managing program execution in a virtual environment, the method comprising the steps of:
when the virtual resource registers for service, a white list in a white list standard library established in advance is issued to the virtual resource;
and after the white list is issued to the virtual resources, program control log recording and combing are carried out on all the programs except the white list, and the release control of the programs except the white list is controlled.
As an improved scheme, before the step of sending the white list in the pre-established white list standard library to the virtual resource when the virtual resource registers for service, the method further includes the following steps:
the method comprises the steps of establishing a white list standard library in advance, wherein the white list standard library adopts ElasticSearch.
As an improved scheme, the step of sending a white list in a pre-established white list standard library to the virtual resource when the virtual resource registers for service specifically includes the following steps:
the virtual resource submits registration information and applies for registering the current service, wherein the registration information comprises operating system information;
analyzing the registration information submitted by the virtual resource to acquire operating system information contained in the registration information;
after the operating system information is acquired, judging whether a local library of the current registration service contains a white list matched with the operating system;
when the local library of the current registration service is judged not to contain the white list matched with the operating system, acquiring the white list matched with the operating system from the white list standard library, and sending the acquired white list to the virtual resource;
and when the local library of the current registration service contains the white list matched with the operating system, issuing the acquired white list to the virtual resource.
As an improvement, the method further comprises the steps of:
when the operating system releases an official patch, an interface of a patch program is added, the patch program is manually input into the white list, and meanwhile, the patch program is pushed to the white list standard library to be updated.
As an improved scheme, after the white list is issued to the virtual resource, program management and control log recording and combing are performed on all program operations outside the white list, and the step of controlling release management and control on the programs outside the white list specifically includes the following steps:
after the white list is issued to the virtual resources, when the programs except the white list are judged to run, the illegal logs of the program running are controlled and generated;
combing the violation logs according to a preset identifier, and displaying an operating program corresponding to the combed violation logs to a user;
receiving a control operation command of a user on an operating program corresponding to the combed violation log, wherein the control operation command comprises a white list adding command and a white list ignoring command;
and executing a release management and control action matched with the management and control operation command according to the management and control operation command.
Another object of the present invention is to provide a system for managing and controlling program running in a virtual environment, the system comprising:
the white list issuing module is used for issuing a white list in a white list standard library established in advance to the virtual resources when the virtual resources register for service;
and the program control module is used for recording and carding program control logs for all program operations except the white list after the white list is issued to the virtual resources, and controlling the release control of the programs except the white list.
As an improvement, the system further comprises:
and the white list standard library establishing module is used for establishing a white list standard library in advance, and the white list standard library adopts ElasticSearch.
As an improved solution, the white list issuing module includes:
the service registration application module is used for submitting registration information by the virtual resources and applying for registering the current service, wherein the registration information comprises operating system information;
the registration information analysis module is used for analyzing the registration information submitted by the virtual resources to acquire operating system information contained in the registration information;
the white list judging module is used for judging whether a local library of the current registration service contains a white list matched with the operating system or not after the operating system information is obtained;
a white list obtaining module, configured to, when it is determined that the white list matching the operating system is not included in the local library of the current registration service, obtain the white list matching the operating system from the white list standard library
The issuing module is used for issuing the acquired white list to the virtual resource;
and when the local library of the current registration service is judged to contain the white list matched with the operating system, the issuing module issues the acquired white list to the virtual resource.
As an improvement, the system further comprises the steps of:
the patch program processing module is used for increasing an interface of the patch program when the operating system releases an official patch, and manually inputting the patch program in the white list;
and the patch program pushing module is used for pushing the patch program to the white list standard library for updating.
As an improved scheme, the program management and control module specifically includes:
the violation log generation module is used for controlling and generating violation logs of program operation when judging that programs except the white list operate after the white list is issued to the virtual resources;
the violation log combing module is used for combing the violation log according to a preset identifier;
the display module is used for displaying the running program corresponding to the carded violation log to a user;
a control operation command receiving module, configured to receive a control operation command performed by a user on an operating program corresponding to the carded violation log, where the control operation command includes a white list adding command and a white list ignoring command;
and the action execution module is used for executing the release management and control action matched with the management and control operation command according to the management and control operation command.
In the embodiment of the invention, when the virtual resource registers for service, a white list in a white list standard library established in advance is issued to the virtual resource; after the white list is issued to the virtual resources, program control log recording and carding are carried out on all program operations except the white list, and release control of the programs except the white list is controlled, so that time cost of virtual resource acquisition programs is saved, and influence of program control on normal services is reduced.
Drawings
In order to more clearly illustrate the detailed description of the invention or the technical solutions in the prior art, the drawings that are needed in the detailed description of the invention or the prior art will be briefly described below. Throughout the drawings, like elements or portions are generally identified by like reference numerals. In the drawings, elements or portions are not necessarily drawn to scale.
FIG. 1 is a flowchart illustrating an implementation of a method for managing and controlling program running in a virtual environment according to the present invention;
fig. 2 is a flow chart of an implementation of issuing a white list in a white list standard library established in advance to a virtual resource when the virtual resource registration service is provided in the present invention;
fig. 3 is a flow chart of implementing program management and control log recording and carding for all program operations except the white list after the white list is issued to the virtual resource, and controlling release management and control for the programs except the white list, according to the present invention;
FIG. 4 is a block diagram of a system for managing and controlling program execution in a virtual environment according to the present invention;
FIG. 5 is a block diagram of a white list issuing module according to the present invention;
fig. 6 is a block diagram of a program management and control module according to the present invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. The following examples are merely for illustrating the technical solutions of the present invention more clearly, and therefore are only examples, and the protection scope of the present invention is not limited thereby.
Fig. 1 is a flowchart of an implementation of a method for managing and controlling program execution in a virtual environment, which specifically includes the following steps:
in step S101, when registering a service for a virtual resource, a white list in a white list standard library established in advance is issued to the virtual resource.
In step S102, after the white list is issued to the virtual resource, program management and control log recording and carding are performed on all program operations outside the white list, and release management and control on the programs outside the white list are controlled.
In the embodiment, for the scenes in which the heterogeneous operating system exists in the virtualization environment, the time cost of each resource acquisition program is saved in a mode of actively issuing the white list according to the type of the operating system during registration. And a program control log carding service is added, the newly added service program is released in time, and the influence of program control on normal service is reduced.
In the embodiment of the present invention, before executing the above step S101, the following steps need to be executed:
a white list standard library is established in advance, wherein the white list standard library adopts an elastic search;
the standard source of the white list standard library is acquired after Windows and Linux official websites download mirror images and decompress, and the data structure is designed as follows:
white list program
Index:whitelist_object;Type:file
Figure 1
In the embodiment of the invention, the service is an independent micro service, a Spring Cloud architecture is adopted, a specific framework is Spring Boot, the service adopts a MySQL database, operating system information and SHA256 information in a local white list library are set as database keywords, and all virtualized resources are required to be registered in the service.
As shown in fig. 2, when registering a virtual resource for service, the step of sending a white list in a pre-established white list standard library to the virtual resource specifically includes the following steps:
in step S201, the virtual resource submits registration information to apply for registering the current service, where the registration information includes operating system information.
In step S202, the registration information submitted by the virtual resource is analyzed, and the operating system information included in the registration information is acquired.
In step S203, after the operating system information is acquired, it is determined whether a white list matching the operating system is included in the local library of the current registration service, if yes, step S204 is executed, otherwise, step S205 is executed.
In step S204, when it is determined that the white list matched with the operating system is not included in the local library of the current registration service, a white list matched with the operating system is obtained from the white list standard library, and the obtained white list is issued to the virtual resource.
In step S205, when it is determined that the white list matched with the operating system is included in the local library of the current registration service, the obtained white list is issued to the virtual resource.
In the embodiment, when the operating system releases an official patch, an interface of a patch program is added, the patch program is manually input into the white list, and meanwhile, the patch program is pushed to the white list standard library for updating, so that the white list standard library is completed.
In the embodiment of the present invention, as shown in fig. 3, after a white list is issued to the virtual resource, program management and control log recording and combing are performed on all program operations outside the white list, and the step of controlling release management and control on the programs outside the white list specifically includes the following steps:
in step S301, after a white list is issued to the virtual resource, when it is determined that a program other than the white list is running, a violation log of the program running is controlled to be generated;
in step S302, combing the violation log according to a preset identifier, and displaying an operating program corresponding to the combed violation log to a user;
in this step, the fields exposed to the user include the virtual resource name, program size, program path, operating system type, and program sha256 value;
in step S303, receiving a control operation command performed by a user on an operating program corresponding to the carded violation log, where the control operation command includes a command to add a white list and a command to ignore the white list;
in step S304, according to the management operation command, a release management action matching the management operation command is executed.
The generated violation log is JSON, and the format of the violation log is as follows:
Figure BDA0002107773910000071
Figure BDA0002107773910000081
in this embodiment, the act of governing includes adding or ignoring a white list.
And after the white list is selected to be added, the program information is issued to all the virtualized resources corresponding to the operating system.
After selecting the ignore white list, the program is stored in the ignore program list. Since the program is not in the whitelisted library, the program is prohibited from running in all virtualized resources;
wherein the ignore program table data structure is:
name of field Type of field Meaning of a field Whether or not to key word
APPNAME Character string Name of program Whether or not
APPSIZE Character string Program size Whether or not
APPTYPE Character string Type of program Whether or not
SHA256 Character string Program SHA256 value Is that
OSVERSION Character string Operating system version Is that
Fig. 4 is a block diagram illustrating a program execution management system in a virtual environment according to the present invention, and for convenience of description, only the portions related to the embodiment of the present invention are shown in the diagram.
The program running control system in the virtual environment comprises:
the white list issuing module 11 is configured to issue a white list in a white list standard library established in advance to the virtual resource when the virtual resource registers for service;
and the program control module 12 is configured to, after issuing the white list to the virtual resource, perform program control log recording and combing on all program operations outside the white list, and control release control of the programs outside the white list.
In this embodiment, the system further comprises:
and a white list standard library establishing module 13, configured to establish a white list standard library in advance, where the white list standard library adopts an elastic search.
As shown in fig. 5, the white list issuing module 11 includes:
a service registration application module 14, configured to submit registration information to a virtual resource, and apply for registering a current service, where the registration information includes information of an operating system;
a registration information analysis module 15, configured to analyze registration information submitted by the virtual resource, and acquire operating system information included in the registration information;
a white list judgment module 16, configured to judge whether a local library of the current registration service includes a white list matched with the operating system after the operating system information is obtained;
a white list obtaining module 17, configured to, when it is determined that the white list matching the operating system is not included in the local library of the current registration service, obtain the white list matching the operating system from the white list standard library
The issuing module 18 is configured to issue the obtained white list to the virtual resource;
when it is determined that the white list matched with the operating system is included in the local library of the current registration service, the issuing module 18 issues the acquired white list to the virtual resource.
In this embodiment, the system further comprises the steps of:
the patch processing module 19 is configured to add an interface of a patch when the operating system issues an official patch, and manually enter the patch in the white list;
and the patch program pushing module 20 is configured to push the patch program to the white list standard library for updating.
In the embodiment of the present invention, as shown in fig. 6, the program management and control module 12 specifically includes:
the violation log generation module 21 is configured to, after issuing a white list to the virtual resource, control generation of a violation log of program operation when it is determined that a program other than the white list is operating;
the violation log combing module 22 is configured to comb the violation log according to a preset identifier;
the display module 23 is configured to display the operating program corresponding to the carded violation log to a user;
a management and control operation command receiving module 24, configured to receive a management and control operation command performed by a user on an operating program corresponding to the carded violation log, where the management and control operation command includes a white list adding command and a white list ignoring command;
and the action execution module 25 is configured to execute the release management and control action matched with the management and control operation command according to the management and control operation command.
The functions of the modules are described in the above embodiments, and are not described herein again.
In the embodiment of the invention, when the virtual resource registers for service, a white list in a white list standard library established in advance is issued to the virtual resource; after the white list is issued to the virtual resources, program control log recording and carding are carried out on all program operations except the white list, and release control of the programs except the white list is controlled, so that time cost of virtual resource acquisition programs is saved, and influence of program control on normal services is reduced.
The above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; such modifications and substitutions do not depart from the spirit and scope of the present invention, and they should be construed as being included in the following claims and description.

Claims (8)

1. A method for managing and controlling program operation in a virtual environment is characterized by comprising the following steps:
when the virtual resource registers for service, a white list in a white list standard library established in advance is issued to the virtual resource;
after a white list is issued to the virtual resources, program control log recording and carding are carried out on all program operations except the white list, and release control on the programs except the white list is controlled;
after the white list is issued to the virtual resource, program control log recording and combing are performed on all program operations outside the white list, and the step of controlling release control on the programs outside the white list specifically includes the following steps:
after the white list is issued to the virtual resources, when the programs except the white list are judged to run, the illegal logs of the program running are controlled and generated;
combing the violation logs according to a preset identifier, and displaying an operating program corresponding to the combed violation logs to a user;
receiving a control operation command of a user on an operating program corresponding to the combed violation log, wherein the control operation command comprises a white list adding command and a white list ignoring command;
executing a release management and control action matched with the management and control operation command according to the management and control operation command;
the control action comprises adding a white list or ignoring the white list;
after the white list is selected to be added, the program information is issued to all the virtualized resources corresponding to the operating system;
if the white list is selected to be ignored, the program is stored in the ignored program table, and the program is forbidden to run in all the virtualized resources because the program is not in the white list library.
2. The method for managing and controlling program execution in a virtual environment according to claim 1, wherein said step of sending a white list in a pre-established white list standard library to the virtual resource when registering a service for a virtual resource further comprises the following steps:
the method comprises the steps of establishing a white list standard library in advance, wherein the white list standard library adopts ElasticSearch.
3. The method for managing and controlling program execution in a virtual environment according to claim 2, wherein the step of sending a white list in a white list standard library established in advance to the virtual resource when registering a service for the virtual resource specifically comprises the steps of:
the virtual resource submits registration information and applies for registering the current service, wherein the registration information comprises operating system information;
analyzing the registration information submitted by the virtual resource to acquire operating system information contained in the registration information;
after the operating system information is acquired, judging whether a local library of the current registration service contains a white list matched with the operating system;
when the local library of the current registration service is judged not to contain the white list matched with the operating system, acquiring the white list matched with the operating system from the white list standard library, and sending the acquired white list to the virtual resource;
and when the local library of the current registration service contains the white list matched with the operating system, issuing the acquired white list to the virtual resource.
4. The method for managing program execution in a virtual environment according to claim 3, further comprising the steps of:
when the operating system releases an official patch, an interface of a patch program is added, the patch program is manually input into the white list, and meanwhile, the patch program is pushed to the white list standard library to be updated.
5. A system for managing program execution in a virtual environment, the system comprising:
the white list issuing module is used for issuing a white list in a white list standard library established in advance to the virtual resources when the virtual resources register for service;
the program control module is used for recording and carding program control logs for all program operations except the white list after the white list is issued to the virtual resources, and controlling the release control of the programs except the white list;
wherein, the program management and control module specifically comprises:
the violation log generation module is used for controlling and generating violation logs of program operation when judging that programs except the white list operate after the white list is issued to the virtual resources;
the violation log combing module is used for combing the violation log according to a preset identifier;
the display module is used for displaying the running program corresponding to the carded violation log to a user;
a control operation command receiving module, configured to receive a control operation command performed by a user on an operating program corresponding to the carded violation log, where the control operation command includes a white list adding command and a white list ignoring command;
the action execution module is used for executing the release management and control action matched with the management and control operation command according to the management and control operation command;
the control action comprises adding a white list or ignoring the white list;
after the white list is selected to be added, the program information is issued to all the virtualized resources corresponding to the operating system;
if the white list is selected to be ignored, the program is stored in the ignored program table, and the program is forbidden to run in all the virtualized resources because the program is not in the white list library.
6. The virtual environment in-program-execution management and control system of claim 5, further comprising:
and the white list standard library establishing module is used for establishing a white list standard library in advance, and the white list standard library adopts ElasticSearch.
7. The system of claim 6, wherein the white list issuing module comprises:
the service registration application module is used for submitting registration information by the virtual resources and applying for registering the current service, wherein the registration information comprises operating system information;
the registration information analysis module is used for analyzing the registration information submitted by the virtual resources to acquire operating system information contained in the registration information;
the white list judging module is used for judging whether a local library of the current registration service contains a white list matched with the operating system or not after the operating system information is obtained;
a white list obtaining module, configured to, when it is determined that the white list matching the operating system is not included in the local library of the current registration service, obtain the white list matching the operating system from the white list standard library
The issuing module is used for issuing the acquired white list to the virtual resource;
and when the local library of the current registration service is judged to contain the white list matched with the operating system, the issuing module issues the acquired white list to the virtual resource.
8. The virtual environment in-program-execution management system of claim 7, further comprising the steps of:
the patch program processing module is used for increasing an interface of the patch program when the operating system releases an official patch, and manually inputting the patch program in the white list;
and the patch program pushing module is used for pushing the patch program to the white list standard library for updating.
CN201910559238.0A 2019-06-26 2019-06-26 Method and system for managing and controlling program operation in virtual environment Active CN110390195B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910559238.0A CN110390195B (en) 2019-06-26 2019-06-26 Method and system for managing and controlling program operation in virtual environment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910559238.0A CN110390195B (en) 2019-06-26 2019-06-26 Method and system for managing and controlling program operation in virtual environment

Publications (2)

Publication Number Publication Date
CN110390195A CN110390195A (en) 2019-10-29
CN110390195B true CN110390195B (en) 2021-05-25

Family

ID=68285810

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910559238.0A Active CN110390195B (en) 2019-06-26 2019-06-26 Method and system for managing and controlling program operation in virtual environment

Country Status (1)

Country Link
CN (1) CN110390195B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112788075B (en) * 2019-11-07 2024-04-09 北京京东尚科信息技术有限公司 Business service monitoring method and device
CN112968929B (en) * 2021-01-29 2021-11-30 上海安畅网络科技股份有限公司 Server management method and system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105138901A (en) * 2015-08-03 2015-12-09 浪潮电子信息产业股份有限公司 White list-based cloud host active defense implementation method
CN106529282A (en) * 2016-11-10 2017-03-22 广东电网有限责任公司电力科学研究院 Execution system and execution method for white list based on trust chain
CN107944232A (en) * 2017-12-08 2018-04-20 郑州云海信息技术有限公司 A kind of design method and system of the Active Defending System Against based on white list technology
CN108549810A (en) * 2018-04-03 2018-09-18 郑州云海信息技术有限公司 A kind of program white list service method and system based on OS Type

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105138901A (en) * 2015-08-03 2015-12-09 浪潮电子信息产业股份有限公司 White list-based cloud host active defense implementation method
CN106529282A (en) * 2016-11-10 2017-03-22 广东电网有限责任公司电力科学研究院 Execution system and execution method for white list based on trust chain
CN107944232A (en) * 2017-12-08 2018-04-20 郑州云海信息技术有限公司 A kind of design method and system of the Active Defending System Against based on white list technology
CN108549810A (en) * 2018-04-03 2018-09-18 郑州云海信息技术有限公司 A kind of program white list service method and system based on OS Type

Also Published As

Publication number Publication date
CN110390195A (en) 2019-10-29

Similar Documents

Publication Publication Date Title
US10757106B2 (en) Resource access control method and device
US8819832B2 (en) Systems and methods for performing vulnerability scans on virtual machines
EP2782039B1 (en) Program analysis/verification service provision system, control method for same, control program, control program for directing computer to function, program analysis/verification device, program analysis/verification tool management device
CN107066242B (en) Method and system for determining identification of software in software container
WO2018113596A1 (en) Method of processing application reviewing operation permission, device, and data storage medium
US10437620B2 (en) Pinned vulnerability scanner for scanning virtual machines on a single machine
US9928098B2 (en) Identifying application usage roles for devices provided to virtual machines
CN109474467B (en) Network automation management method and device, storage medium and electronic equipment
US20150089494A1 (en) Virtual machine template optimization
CN109672722B (en) Data deployment method and device, computer storage medium and electronic equipment
CN110390195B (en) Method and system for managing and controlling program operation in virtual environment
US20170286081A1 (en) Silent Installation of Software with Dependencies
US11934287B2 (en) Method, electronic device and computer program product for processing data
US20190286487A1 (en) System and method for performing biometric operations in parallel
CN103077071A (en) Method and system for acquiring process information of KVM (Kernel-based Virtual Machine)
US10331589B2 (en) Storing interrupt location for fast interrupt register access in hypervisors
CN110543789A (en) method and device for adapting handle and third-party application program and storage medium
CN111985906A (en) Remote office system, method, device and storage medium
US20150286490A1 (en) I/o redirection method, i/o virtualization system and method, and content delivery apparatus
US20140181502A1 (en) Dynamically manipulating rules for adding new devices
US10146707B2 (en) Hardware-based memory protection
US10268466B2 (en) Software installer with built-in hypervisor
CN103051668B (en) A kind of server resource management system and management method
CN111258618A (en) File configuration method and device, computer equipment and storage medium
CN114706657A (en) Multi-platform virtual machine management interface, management method, terminal and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant