Subjects: Computer Science >> Integration Theory of Computer Science submitted time 2018-04-19 Cooperative journals: 《计算机应用研究》
Abstract： The strong isolation property of the virtualization syste introduces the semantic gap problem while providing a reliable environment for the deploying the security mechanism. Current research generally relies on the information of software architecture which is not reliable, for the data structures and control flows are easy to be illegally manipulated. And the detection algorithm employed in related research has the low efficiency in identification of guest state. For these problems, this paper designed the feature construction and window mark to preprocess the captured data so as to meet the necessary conditions of carrying out data mining, and then established the semantic gap bridging model of virtualization system based on feature selection, which can build the execution mode of virtual machine and carry out the security detection only relying on the hardware architecture data. Test results show that proposed model can screen out the key features of virtual machine and effectively identify the abnormal behavior of guest system, which lead to the efficiency improvement of bridging semantic gap. This scheme provides a feasible solution for dealing with the problem of semantic gap.
Hits
Hits
Downloads
Comment