A Centralized Monitoring Mechanism in Virtualized Environments

Virtualization technology seals the compute and storage resources in the virtual machine to improve resource efficiency, which becomes the core support of cloud computing platform. Meanwhile, monitoring of virtual machines is also increasingly becoming an important security demand of the virtualization platform. Currently, the monitoring system of virtual machine behavior is usually deployed in the management domain on the same physical equipment of monitored virtual machine. From the perspective of system architecture, the distributed monitoring method is not conducive to a cloud platform provider for unified management of computing resources, and the monitoring behavior in the physical host of monitored virtual machine will consume a lot of limited computing and storage resources on the virtual machine server, thus occupying the limited service resources of the virtual machine. Since the observed monitoring overhead of a virtual machine lies mainly in information processing, a kind of centralized VMI mechanism (CVMI) is capable of dividing the monitoring mechanism, which acquires the status information of the virtual machine on the physical host of monitored virtual machine, and then sends information to the centralized security monitoring server, and analyzes the status information, in order to detect that the security events are operated on the centralized security monitoring server clusters. The experimental results show that, CVMI can effectively monitor the behavior of the virtual machine, and reduce the performance loss caused by introduction of performing monitoring in deployment of physical nodes of virtual machine.