Virtual machine security protection method and apparatus

The present invention provides a virtual machine security protection method and apparatus. The method comprises: pre-determining a key mirror file to be measured in a virtual machine mirror, and pre-configuring a security measurement module; and further comprises: S1, loading a current virtual mirror of a current virtual machine; S2, calling the security measurement module via a Libvirt interface, and measuring a current key mirror file in the current virtual machine mirror using the security measurement module; and S3, determining, according to a measurement result of the current mirror file, whether to enable the current virtual machine. The virtual machine security protection method and apparatus provided by the present invention can protect security of the virtual machine.