一种高效的面向虚拟桌面恶意代码检测机制简

 与传统的恶意代码检测方式相比，面向虚拟桌面的恶意代码检测方法面临着性能方面的挑战，同一物理服务器上多个虚拟桌面同时开展恶意代码检测使得磁盘等硬件成为严重的IO性能瓶颈.本文提出了一种高效的虚拟桌面恶意代码检测方案，基于母本克隆技术的虚拟桌面恶意代码检测机制（MCIDS），MCIDS根据虚拟桌面系统的特点，通过系统映像网络存储克隆技术以及部署在网络存储系统中的恶意代码引擎减少虚拟桌面系统中的恶意代码检测范围，有效减少恶意代码检测所需的磁盘IO开销；同时MCIDS还克服了传统“Out-of-the-Box”安全检测机制存在的语义差别问题，改善了系统的安全性能.在原型系统上的实验显示该方法在技术上是可行的，与现有方法相比MCIDS具有较好的性能优势.

An Effective Malicious Code Detection Mechanism for Virtual Desktop

Compared with traditional malicious codes detection mechanisms,detecting malicious codes in virtual desktop system faces serious performance challenge,multiple virtual desktops on a physical server conduct malicious code detection in parallel will face serious bottlenecks in the hardware devices with poor performance,such as hard disks.In this paper,we propose a malicious code detection mechanism for virtual desktop system,a malicious code detection mechanism based on mother-clone technology(MCIDS).Based on the characteristics of virtual desktops,MCIDS is designed to reduce the scope of mal-code detection by system image network storage clone technique and the mal-code detection engine deployed in network storage system,and this method effectively decreases the amount of disk IO operation caused by the detection of malicious codes,so that the performance of the system is improved greatly;In addition,MCIDS overcomes the semantic gap problem which often exists in traditional out-of-the-box security detection mechanisms.Experiments conducted on the prototype show that our method is technicallyfeasibleand the performance of MCIDS is better than other methods.