Method, device and system for processing cloud application attack behavior in cloud computing system

Abstract

The invention discloses a processing device for cloud application attack behavior in a cloud computing system, comprising: a security analyzer, a security processor and a policy manager, wherein: the policy manager is used to store security judgment rules and malicious application processing rules; security analysis The detector is used to receive the application behavior data sent by the security detector, and according to the application behavior data and security judgment rules, determine whether the cloud application running on the cloud host has attack behavior, and determine whether the cloud application running on the cloud host has attack behavior When , the application behavior data is sent to the security processor; the security processor is used to call the interface provided by the cloud controller in the cloud computing system to process the cloud application with attack behavior according to the malicious application processing rules. The solution of the invention performs security protection based on cloud computing application levels, which can prevent mutual attacks between different applications inside the same host, and reduce the impact on normal applications at the same time.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a method, device and system for processing cloud application attack behavior in a cloud computing system. Background technique [0002] According to the definition of the National Institute of Standards and Technology (NIST), cloud computing has three major service models, namely SaaS (software as a service, software as a service), PaaS (platform as a service, platform as a service). ) and IaaS (infrastructure as a service, infrastructure as a service). Among them, PaaS is a business model that provides a server platform as a service. PaaS mainly provides hardware resources such as CPU and memory as well as software resources such as operating system and program dependency library for cloud applications. Developers of cloud applications do not need to care about the software and hardware environment in which the application runs, and concentrate on developing the appli...

AI Technical Summary

Problems solved by technology

[0006] The solutions in the prior art can only prevent attacks between cloud hosts inside the cloud computing system, or external attacks to the cloud hosts inside the cloud computing system, but cannot prevent mutual attacks between different cloud applications inside the same cloud host, or cloud Attacks from within the host against the cloud host itself

In addition, the existing technical solution monitors and cleans traffic in units of cloud hosts, which will affect all cloud applications in the target cloud host

Images