Software security verification method, device, and system

A software security verification method, comprising:

• determining, by a second device, a security verification result of a virtualized network function (VNF) packet of a VNF, wherein:
• the security verification result is a result of a security verification on a stored VNF packet of the VNF during an instantiation process of the VNF started by a first device according to an instantiation request of the VNF received by the first device;
• and
• a software image of the stored VNF packet of the VNF is stored in the second device;
• receiving, by the second device, first instruction information sent by a first device, wherein the first instruction information is configured to instruct the second device to perform security verification on the software image of the VNF;
• performing, by the second device, security verification on the software image of the VNF according to the first instruction information, and determining a security verification result of the software image of the VNF;
• sending, by the second device, second result information to the first device, wherein the second result information comprises the result of performing security verification on the software image of the VNF by the second device;
• and
• connecting, by the second device, a virtual machine (VM) to a network when the security verification on the VNF packet of the VNF succeeds and the software image of the VNF succeeds, wherein the VM is a VM created for the VNF by the second device.

A first device, comprising a processor, a memory, a bus, and a transmitter, wherein the processor, the memory, and the transmitter are connected to each other by using the bus;

• the processor is configured to:
• receive an instantiation request to instantiate a virtualized network function (VNF);
• during an instantiation process of the VNF started by first device according to the instantiation request of the VNF, perform security verification on a stored VNF packet of the VNF;
• and
• the transmitter is configured to:
• send first result information to a second device when a verification result of the processor indicates that security verification on the VNF packet of the VNF succeeds, wherein:
• a software image of the stored VNF packet is stored in the second device;
• and
• the first result information comprises information that security verification on the VNF packet of the VNF succeeds;
• send first instruction information to the second device, wherein the first instruction information is configured to instruct the second device to perform security verification on the software image of the VNF;
• and
• receive second result information from the second device, wherein the second result information comprises a result of performing security verification on the software image of the VNF by the second device.

A second device, comprising:

• a processor,
• a memory,
• a bus, wherein the processor and the memory are connected to each other by using the bus;
• and the processor is configured to:
• determine a security verification result of a virtualized network function (VNF) packet of a VNF, wherein the security verification result is a result of a security verification on a stored VNF packet of the VNF during an instantiation process of the VNF started by a first device according to an instantiation request of the VNF received by the first device;
• and
• connect a virtual machine VM to a network when determining that security verification on the VNF packet of the VNF succeeds, wherein the VM is a VM created for the VNF by the second device;
• and
• a transmitter, wherein the transmitter is configured to send second result information to the first device, wherein the second result information comprises the result of performing security verification on the software image of the VNF by the second device.