Intrusion detection system facing cloud calculating environment

Abstract

According to the invention, a safety problem based on splitting and under large-scale shared virtual calculating environment is discussed. And the invention provides a safety framework based on a virtual machine and facing the virtual calculating environment and a large-scale distributed extensible intrusion detection system. The system provides resource access monitoring identity authentication inside and outside an ability service domain and an encrypted data transmission channel for a user, provides isolation and protection of a user space and a system space and finally guarantees application safety based on an ability server. By using the system of the invention, many safety problems under the ability server, such as, a large-scale dynamic user quantity, large-scale dynamic virtual resource objects, a calculating load of dynamic increase and reduction, user space isolation, user system isolation and protection, internal and external network attack prevention, equipment safety reuse and sharing, communication safety, uniform authentication, access control and the like, are solved.

Description

technical field [0001] The present invention relates to security detection in a cloud computing environment, in particular to an intrusion detection system oriented to a cloud computing environment Background technique [0002] The virtualization technology aimed at improving resource utilization and realizing large-scale resource sharing has developed rapidly in recent years. Currently, there are two main research directions in virtualization technology: node-level virtualization and application-level virtualization. At present, the hot issue of application-level virtualization research in the world is to use grid and P2P methods to make most computers coordinate their work so as to utilize the idle resources of each PC. However, since the personal computer is designed as a closed and complete system, it is difficult to guarantee the efficiency of sharing through this inherent system barrier. The traditional node-level virtualization technology cannot fully achieve this g...

AI Technical Summary

Problems solved by technology

[0003] Grid-based application-level virtual security research is currently mainly based on Keberos, SSL, SSH, and XML encryption (Xenc), which solves the problems of identity authentication and access control in grid environments; and focuses on secure data transmission channels based on heterogeneous grid environments architecture, but not much involved in application-based security protection and resource security multiplexing; security technology research in node-oriented virtualization environment is based on partition isolation, disaster recovery, partition hot migration, partition hot backup and other high-availability technology solutions The safety and reliability of some virtual applications (such as Vmware, Virtual Station), but when faced with a hardware-level virtualization environment, the resources in the partition are directly managed by the underlying hardware. Once a major fault occurs, it cannot be effectively isolated , the fault may spread to all partitions using the resource, resulting in a global fault (such as: Xen, Intel's Virtualization Technology, AMD's Pacifica); collapsa virtual intrusion detection center [4] Provides centralized deployment and management of virtual honeypots, solves the problems of centralized management and deployment, and provides a global intrusion detection view; however, collapsa is still a virtual honeypot that is concentrated on virtual physical machines from the virtual mechanism itself, and does not Solve many problems such as security monitoring management, distributed intrusion detection engine, user identity authentication, and user space isolation brought about by dynamic splitting of resources and large-scale sharing of components in a large-scale distributed environment

Similar capability service application virtual environment security research At present, there are no related technologies and solutions in the business world and academia

Images