System and method and device for processing cloud application attack behaviors in cloud computing system

Abstract

The invention discloses a device for processing cloud application attack behaviors in a cloud computing system. The device comprises a security analyzer, a security processor and a policy manager. The policy manager is used for storing security judgment rules and malicious application processing rules; the security analyzer is used for receiving application behavior data sent by security detectors, determining whether cloud applications running on cloud hosts have attack behaviors or not, and sending the application behavior data to the security processor when determining that the cloud applications running on the cloud hosts have the attack behaviors; the security processor is used for calling an interface provided by a cloud controller in the cloud computing system to process the cloud applications with the attack behaviors according to the malicious application processing rules. Security protection is performed based on the cloud computing application level, mutual attacks between different applications inside the same host can be prevented, and impact on normal applications is reduced.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a method, device and system for processing cloud application attack behavior in a cloud computing system. Background technique [0002] According to the definition of the National Institute of Standards and Technology (NIST), cloud computing has three major service models, namely SaaS (software as a service, software as a service), PaaS (platform as a service). service) and IaaS (infrastructure as a service, infrastructure as a service). Among them, PaaS is a business model that provides a server platform as a service. PaaS mainly provides hardware resources such as CPU and memory as well as software resources such as operating system and program dependency library for cloud applications. Developers of cloud applications do not need to care about the software and hardware environment in which the application runs, and concentrate on developing the application itself. ...

AI Technical Summary

Problems solved by technology

[0006] The solutions in the prior art can only prevent attacks between cloud hosts inside the cloud computing system, or external attacks to the cloud hosts inside the cloud computing system, but cannot prevent mutual attacks between different cloud application

Images