Virtual machine distribution method and system for resisting co-resident attack

The invention relates to a synresident attack resistant virtual machine distribution method and system, and the method comprises the steps: S1, dividing tenants into normal tenants and suspicious tenants based on the behavior analysis of the tenants, and distributing threat values and vulnerability values for corresponding virtual machines; s2, setting a threshold value tenant PerPM to limit the number of tenants on each physical machine; adding the physical machines of which the number of the borne tenants is smaller than that of tenant PerPM into a list avaPMs; s3, for a virtual machine request of a normal tenant, selecting a physical machine which enables the virtual machine request to be subjected to the minimum risk of co-resident attack to be allocated; and S4, for virtual machine requests of suspicious tenants, selecting a physical machine which enables the risk of attacking normal tenants to be minimum for allocation. The method provided by the invention balances the load of the data center and the si