| 摘要 |
A channel detection method and apparatus. The method comprises: when at least two virtual machines performing memory deduplication merge on the same physical host, intercepting an event sequence executed by an operating system in an operating system instruction stream, wherein the event sequence comprises a time acquisition event; searching for a target sub-sequence from the event sequence, and acquiring a time attribute of the target sub-sequence; and judging whether the time attribute of the target sub-sequence satisfies a pre-set condition, and when the time attribute of the target sub-sequence satisfies the pre-set condition, determining that a hidden channel exists in the system. The use of the present invention can accurately detect whether a hidden channel exists in the system, and will not influence a normal function of a memory deduplication mechanism in the system. |
