Design of security risk assessment framework under oVirt cluster based on REST

摘要

Aiming at the problem that oVirt cluster host security detection tools is not easy to integrate and the evaluation indicator data is difficult to collect and quantify, the paper designs a oVirt virtualization cluster security risk detection and assessment framework. The system uses the distributed architecture and REST-based technology for communication between the various modules. Risk detection tools distributed on each Slave node in the form of services access to the platform, responsible for detecting operation and reporting result data to the master server. The master server, uses ZooKeeper service to coordinate the entire cluster, can real-time found all the testing services and it has a certain disaster recovery capability. Experimental results show that the system is flexible and reliable, easy to expand, to support different types of clustered security testing in conjunction with the corresponding evaluation system to form a complete evaluation report.