云环境下的Linux进程监控的设计与实现  

Design and Implementation of Linux System Resources Collected Under the Cloud

作　　者：陶海鹏[1] 王勇 俸皓[1,2] 

机构地区：[1]桂林电子科技大学计算机与信息安全学院,广西桂林541004 [2]桂林电子科技大学广西云计算与复杂系统高校重点实验室,广西桂林541004

出　　处：《微电子学与计算机》2017年第7期137-140,共4页Microelectronics & Computer

基　　金：国家自然科学基金项目(61172053;61163058;61662018);广西自然基金(2016GXNSFAA380153);广西云计算与复杂系统高校重点实验室资助项目(2015209)

摘　　要：随着云计算的发展,云虚拟主机不仅面临着传统主机的安全问题,也面临着云安全问题.针对漏洞入侵、虚拟主机逃逸等问题,云平台缺乏主机监控方法.Linux系统内核的关键函数位置下插入探测点,在内核层收集所需要的系统进程信息,提出了基于内核Kprobe机制的进程信息监控方案的设计思路及实现方法.以上方案有助于保护云虚拟主机的系统安全和数据安全,完善云平台的监控系统.通过对系统安装应用的前后的系统性能测试,证明设计的进程监控方法占用系统资源较低,从而证实了所设计方案有良好的可行性.With the development of cloud computing, cloud hosting is not only facing the security problem of traditional host, but also facing problem of cloud security. For vulnerability intrusion, virtual host escapes and other issues, cloud platform absence of host monitoring methods. Because of inserting the probe point in the key positions of the function of the Linux kernel and collecting the required information of system process in the kernel layer, the implementation method and the design process and of the monitoring system information which based on kernel Kprobe mechanism has been proposed. The scheme above can not only be helpful to keep security of the system and data of the cloud virtual host, but also Improve the monitoring system of the cloud platform. Through the system performance testing before and after the installation of application in the system, that the process monitoring method which designed can be proved to Occupy lower system resource, so that the design scheme of the system is proved to have better feasibility.

关 键 词：云安全 系统进程收集 云平台 LINUX 监控 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]