面向Microsoft Virtual PC的虚拟机远程检测方法

摘要

虚拟机技术的广泛应用给信息安全带来新的问题和挑战，由于现有的安全扫描系统检测不到虚拟机的存在，所以无法扫描虚拟机的安全漏洞。文中提出了一种面向VPC ( Microsoft Virtual PC)的虚拟机远程检测方法，此方法根据虚拟机MAC地址中携带的厂商标识符，能正确地识别网络中存在的VPC虚拟机；并利用虚拟机与宿主机的关联性快速寻找到虚拟机的宿主机，为进一步扫描虚拟机的安全漏洞和管理虚拟机网络提供基础。实验结果表明，该方法能准确地检测网络中存在的VPC虚拟机。%The wide application of virtual machine technology brings new problems and challenges to information security. Existing securi-ty scanning system can't detect the virtual machine,so can't scan security vulnerabilities. A remote detection method oriented VPC is proposed. This method uses the flag in virtual machine's MAC address to find the running virtual machine,and using the relationship be-tween the virtual machine and the host to position the virtual machine. All this provides a basis for virtual machine scanning and manage-ment. Experiment results show that the method can find the running virtual machine effectively.