A Method to Implement File Antivirus Based on Virtualization

doi:10.13190/j.jbupt.2017-192

JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM ›› 2018, Vol. 41 ›› Issue (2): 50-55.doi: 10.13190/j.jbupt.2017-192

• Papers • Previous Articles Next Articles

A Method to Implement File Antivirus Based on Virtualization

YIN Xue-yuan¹, CHEN Xing-shu², LI Hui¹, CHEN Lin¹

1. College of Computer Science, Sichuan University, Chengdu 610065, China;
2. Cybersecurity Research Institute, Sichuan University, Chengdu 610065, China

Received:2017-09-20 Online:2018-04-28 Published:2018-03-17

Abstract

Abstract: To solve the performance overhead and resource consumption brought by an antivirus software when performing operations of virus scanning and virus database updating, an antivirus framework named HyperAV based on virtualization was proposed. HyperAV was able to provide antivirus capability for virtual machine files with low performance overhead, a mechanism of access control and isolation at the granularity of sector level was also provided. The process of virus scanning was optimized by monitoring the sector change information of a running virtual machine, which had a significant acceleration effect to the virus scanning process of virtual machines. HyperAV was constructed by a front and a rear end with each used as a controller and an antivirus worker, the data needed by antivirus software was redirected to server clusters so that duplications of virus database updating could be avoided, and performance overload brought by antivirus software running inside virtual machines was avoided. A prototype system based on kernel-based virtual machine virtualization platform was realized, the results showed that HyperAV was able to provide antivirus capability with low performance overload for virtual machines.

Key words: cloud computing, virtualization, virtual machine, antivirus

CLC Number:

TP316

YIN Xue-yuan, CHEN Xing-shu, LI Hui, CHEN Lin. A Method to Implement File Antivirus Based on Virtualization[J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(2): 50-55.

References

[1] Islam T, Manivannan D, Zeadally S. A classification and characterization of security threats in cloud computing[J]. International Journal of Next-Generation Computing, 2016, 7(1):1-17.
[2] Khari M, Gupta S, Kumar M. Security outlook for cloud computing:a proposed architectural-based security classification for cloud computing[C]//2016 International Conference on Computing for Sustainable Global Development (INDIACom). NJ:IEEE, 2016:2153-2158.
[3] Khurana R, Gupta H. A hybrid model on cloud security[C]//20165^th International Conference on Reliability, Infocom Technologies and Optimization (ICRITO) (Trends and Future Directions). NJ:IEEE, 2016:347-352.
[4] Chen Lin, Chen Xingshu, Jiang Junfang, et al. Research and practice of dynamic network security architecture for IaaS platforms[J]. Tsinghua Science and Technology, 2014, 19(5):496-507.
[5] 俞能海, 郝卓, 徐甲甲, 等. 云安全研究进展综述[J]. 电子学报, 2013, 41(2):371-381. Yu Nenghai, Hao Zhuo, Xu Jiajia, et al. Review of cloud computing security[J]. Acta Electronica Sinica, 2013, 41(2):371-381.
[6] 金鑫, 陈兴蜀. 可信链跨物理主机迁移及快速恢复方法[J]. 武汉大学学报(理学版), 2016(2):103-109. Jin Xin, Chen Xingshu. Rapid restoration of migrated trusted chain between physical machines[J]. Journal of Wuhan University (Natural Science Edition), 2016(2):103-109.
[7] Zhang Lei, Chen Xingshu, Liu Liang, et al. Trusted domain hierarchical model based on noninterference theory[J]. The Journal of China Universities of Posts and Telecommunications, 2015, 22(4):7-16.
[8] Oberheide J, Cooke E, Jahanian F. Rethinking antivirus:executable analysis in the network cloud[C]//2^nd USENIX Workshop on Hot Topics in Security (HotSec 2007). Berkeley:USENIX, 2007:1-5.
[9] Zheng Xufei, Fang Yonghui. An ais-based cloud security model[C]//2010 International Conference on Intelligent Control and Information Processing. NJ:IEEE, 2010:153-158.
[10] Oberheide J, Cooke E, Jahanian F. CloudAV:N-version antivirus in the network cloud[C]//USENIX Security Symposium. Berkeley:USENIX, 2008:91-106.
[11] Nachenberg C. Antivirus accelerator:U. S, 6021510[P]. 2000-02-01.
[12] McAfee. McAfee management for optimized virtual environments AntiVirus[EB/OL].[2017-03-24]. https://www.mcafee.com/cn/resources/data-sheets/ds-move-anti-virus.pdf.
[13] Kivity A, Kamay Y, Laor D, et al. KVM:the Linux virtual machine monitor[C]//Proceedings of the Linux Symposium. Ottawa:USENIX, 2007:225-230.
[14] Uhlig R, Neiger G, Rodgers D, et al. Intel virtualization technology[J]. Computer, 2005, 38(5):48-56.
[15] Bellard F. QEMU, a fast and portable dynamic translator[C]//USENIX Annual Technical Conference, FREENIX Track. Berkeley:USENIX, 2005:41-46.
[16] McLoughlin M. The QCOW2 image format[EB/OL]. Orinda:GNOME Foundation, 2008[2017-03-24]. https://people.gnome.org/~markmc/qcow-image-format.html.
[17] ClamAV. ClamAV official website[EB/OL].[2018-1-6]. https://www.clamav.net/.

A Method to Implement File Antivirus Based on Virtualization

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

[1]	. Multicast Service Chain Deployment and Adjustment Method under User Dynamic Access [J]. Journal of Beijing University of Posts and Telecommunications, 2022, 45(6): 55-61.
[2]	JIA Yuning, WEI Yifei, ZHOU Junhua. Service Function Chain Orchestrating Algorithm Based on SDN and NFV [J]. Journal of Beijing University of Posts and Telecommunications, 2022, 45(2): 85-90.
[3]	ZHANG Zhi-hua, WANG Meng-qing, MAO Wen-tao, LIU Chun-hong, CHENG Bo. Joint Prediction of Multi-Workload Sequences Based on Temporal Correlation in the Cloud [J]. Journal of Beijing University of Posts and Telecommunications, 2020, 43(4): 68-75.
[4]	YUE Yi, CHENG Bo. Lightweight Network Services Orchestration Environment Based on NFV for End Users [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2019, 42(4): 24-31.
[5]	ZHAO Guo-xi, JIN Shun-fu, MA Cong-bian, CAO Jian-yu, XU Li-jun. Analysis on Cloud Service System with Variable Number of Servers [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2019, 42(4): 114-120.
[6]	YI Zhi-ling, CUI Chun-feng, HAN Shuang-feng, PAN Cheng-kang, CHEN Ya-mi. Analysis of Key Technologies of 5G-Oriented Cellular Internet of Things [J]. Journal of Beijing University of Posts and Telecommunications, 2018, 41(5): 20-25.
[7]	TANG Hong-wei, FENG Sheng-zhong, ZHAO Xiao-fang. TOChain: a High-Performance SFC for Virtual Network Security [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2018, 41(1): 70-80.
[8]	ZHANG Shu-hui, MENG Xiang-xu, WANG Lian-hai, XU Shu-jiang. A Security Protection Model for Virtualization Based on Memory Introspection [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 43-47.
[9]	ZHU Xiao-ning, SUN Bin, ZHU Chun-ge. Reliability Evaluation Model of Large Scale Cloud Resources [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 53-57.
[10]	WANG Li-yu, SUN Bin, QIN Tong. Application of Improved DBSCAN Clustering Algorithm in Task Scheduling of Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(s1): 68-71.
[11]	XU Jiu-yun, GUAN Chao, JIANG Dan. A Subjectivity and Time-Varying Reputation-Oriented Trust Management Method in Cloud Services [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2017, 40(5): 30-35.
[12]	LIU Shi-dong, WANG Yao. A Dynamic Probe Station Selection Algorithm in the Network Virtualization Environment [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(s1): 1-5.
[13]	ZHANG Jun-xian, LI Zhou-jun. Buffer Overflow Detection in C Code Using Dynamic Symbolic Execution [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(s1): 50-54.
[14]	LIU Jing, WU Hai-bo, WANG Shao-shuai, JIA Lei. A Colored Petri Nets Model Based Cloud Test Generation Approach and Implementation System [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(5): 89-93,115.
[15]	XIAO Ding, JIA Ya-pu, SHI Chuan. Non-liner Energy Consumption Model for Cloud Computing [J]. JOURNAL OF BEIJING UNIVERSITY OF POSTS AND TELECOM, 2016, 39(1): 107-111.