Service providers provide virtualized IT resources by using Internet technologies in their services. Users use the provided IT resources as much as they want and pay the corresponding fee. In such cloud computing environments, issues of malicious codes, hacking and leak of confidential information are the biggest concerns of the people involved. In this paper, we study the virtualization security management, which is important for the proper management of collection of virtualization resources information and security events, monitoring and analysis of cloud security situations, and cloud security policies. Specifically, we propose the structuring of the virtualization security management system and the management method to reduce the complexity of administering the virtual machines installed in the cloud data centers caused by the inherent properties of virtual machines characterized by dynamic changes in the form of image files. Therefore, we studied the tracing method for history of infected virtual machines following an analysis of the VM lifecycle status and VM running states.
