A cloud management behavior security control method and system

Abstract

The invention discloses a method for controlling cloud management behavior security. The method comprises the steps: 1) a cloud management center CMS distributes a secrete key to each node, and an agent domain is established on each node; 2) the CMS inquires the secrete key of each node according to node number and determines the type of an authorization message; 3) the CMS generates a management authorization message of cloud management operations and sends the management authorization message to the agent domain after the management authorization message is signed; 4) the agent domain sends the management authorization message to a virtual machine monitor of each node to conduct verification and adds the management authorization message into a security server if the management authorization message passes the verification; 5) the CMS sends a cloud management operation request to a cloud platform agent CMP of the node; 6) the CMP sends a super call request to the virtual machine monitor according to the cloud management operation request, the virtual machine monitor firstly inquires whether an authorization item of the cloud management operation request exists in the security server or not, if the authorization item exists in the security server, the type and the timestamp of the authorization message are verified, if the verification is passed, the request is executed, and if the verification is not passed, the request is refused. The method can reduce the risk caused by the denial of service attack and malicious eavesdropping.

Description

technical field [0001] The invention relates to a cloud management behavior security control method and system, which belong to the field of cloud computing security and are mainly applied to the security management and control of computing nodes in a cloud environment. Background technique [0002] At present, cloud computing generally refers to the use of software to effectively manage computing resources and storage resources in one or more large-scale clusters, and then users can submit their own tasks to the cloud, regardless of how the cloud works internally. of. Generally speaking, cloud computing regards the entire computer cluster based on network interconnection as a supercomputer with unified management and unified operation. Personal computers, workstations, and mobile devices inside the cloud can work together to effectively utilize massive processors and processing space. [0003] Users can directly access the cloud through the Internet, and then get a comple...

AI Technical Summary

Problems solved by technology

[0010] Although this patent also belongs to the field of cloud computing security, its focus is mainly on the different needs of different customers for security threat characteristics, and the security of management is realized by dividing security domains, but it does not improve the overall security. platform security

Images