Information processing apparatus, information processing method, and recording medium
An information processing apparatus has a deployment unit configured to deploy an image file and to create files used for a virtual environment, a virtual environment creator configured to create the virtual environment using the files, a recorder configured to record information about a first file included in the files, a manager configured to access the first file stored in the virtual environment and to determine, based on information acquired by accessing the first file, whether to execute software whose execution was detected in the virtual environment, and a normality determinator configured to determine, based on a difference between information acquired by accessing the first file and information about the recorded first file, whether the first file is normal.
1. An information processing apparatus comprising processing circuitry configured to:
deploy an image file and to create files used for a virtual environment;
create the virtual environment using the files;
record information about a first file included in the files;
access the first file stored in the virtual environment and to determine, based on information acquired by accessing the first file, whether to execute software whose execution was detected in the virtual environment, by a manager;
determine, based on a difference between information acquired by accessing the first file and information about the recorded first file, whether the first file is normal; and
when there is no manager configured to manage the created virtual environment, create the manager that manages the created virtual environment,
wherein even when there is no manager that manages the created virtual environment, the manager corresponding to a virtual environment is not created when information that the first file exists in the created virtual environment is not recorded.
2. The information processing apparatus according to claim 1 , wherein the processing circuitry is configured to:
perform control such that the software is not executed in the virtual environment in a case where it is determined that the first file is not normal or in a case where it is determined that the software is not allowed to be executed.
3. The information processing apparatus according to claim 1 , wherein
it is determined that the first file is not normal when information that the first file exists is recorded and information that the first file does not exist is acquired.
4. The information processing apparatus according to claim 1 , wherein
it is determined that the first file is not normal when a recorded path name and an acquired path name of the first file are different from each other.
5. The information processing apparatus according to claim 1 , wherein
it is determined that the first file is not normal when a recorded hash value and an acquired hash value of the first file are different from each other, or when a recorded hash value and a hash value calculated based on acquired information of the first file is different from each other.
6. The information processing apparatus according to claim 1 ,
wherein the processing circuitry is further configured to detect execution of the software in the virtual environment, wherein
the manager is configured to acquire information about the first file when the execution is detected.
7. The information processing apparatus according to claim 1 , wherein the processing circuitry is further configured to detect deletion of a file in the virtual environment, wherein
it is determined that the first file is not normal when deletion of the first file is detected and information that the first file exists is recorded.
8. The information processing apparatus according to claim 1 , wherein
the manager is configured to periodically acquire information about the first file.
9. An information processing method comprising:
deploying an image file and creating files used for a virtual environment;
creating the virtual environment using the files;
recording information about a first file included in the files;
accessing the first file stored in the virtual environment; determining, based on information acquired by accessing the first file, whether to execute software whose execution was detected in the virtual environment, by a manager;
determining, based on a difference between information acquired by accessing the first file and information about the recorded first file, whether the first file is normal; and
creating the manager,
wherein
when there is no manager configured to manage the created virtual environment, the management controller is configured to create the manager that manages the created virtual environment, and
even when there is no manager that manages the created virtual environment, the manager corresponding to a virtual environment is not created when information that the first file exists in the created virtual environment is not recorded.
10. The information processing method according to claim 9 , wherein
the method includes performing control such that the software is not executed in the virtual environment in a case where it is determined that the first file is not normal or in a case where it is determined that the software is not allowed to be executed is further included.
11. The information processing method according to claim 9 , wherein
the method includes determining that the first file is not normal when information that the first file exists is recorded and information that the first file does not exist is acquired.
12. The information processing method according to claim 9 , wherein
the method includes determining that the first file is not normal when a recorded path name and an acquired path name of the first file are different from each other.
13. The information processing method according to claim 9 , wherein
the method includes determining that the first file is not normal when a recorded hash value and an acquired hash value of the first file are different from each other, or when a recorded hash value and a hash value calculated based on acquired information of the first file is different from each other.
14. The information processing method according to claim 9 , further comprising:
detecting execution of the software in the virtual environment, wherein
the method includes acquiring information about the first file when the execution is detected.
15. The information processing method according to claim 9 , further comprising:
detecting deletion of a file in the virtual environment, wherein
the first file is determined to be not normal when deletion of the first file is detected and information that the first file exists is recorded.
16. A non-transitory computer-readable recording medium storing a program executed by a computer, the medium causing the computer to execute:
deploying an image file and creating files used for a virtual environment;
creating the virtual environment using the files;
recording information about a first file included in the files;
accessing the first file stored in the virtual environment; determining, based on information acquired by accessing the first file, whether to execute software whose execution was detected in the virtual environment, by a manager;
determining, based on a difference between information acquired by accessing the first file and information about the recorded first file, whether the first file is normal; and
creating the manager,
wherein
when there is no manager configured to manage the created virtual environment, the manager is configured to create the manager that manages the created virtual environment, and
even when there is no manager that manages the created virtual environment, the manager corresponding to a virtual environment is not created when information that the first file exists in the created virtual environment is not recorded.