Security evaluating and detecting method used for cloud infrastructure

Abstract

The invention relates to the technical field of the information security, in particular to a security evaluating and detecting method used for a cloud infrastructure. The method is completed by a device formed by a dispatching module, a testing software library, a testing mirror, a testing configuration library, a testing result library, an analysis module, a testing requirement docment, a testing report and other modules. Configuration operating is carried out on the testing software library by a user in advance before testing; security testing software which exists in the market and aims at the cloud infrastructure and independently programmed testing software programs are uploaded to the testing software library; classification is carried out on the software according to the usual classification, namely the system security, the network security, the data security, the behavior security and the like, and the software is partitioned to different 'testing software lists'; the testing software library can be continuously updated, and the advancement and the maturity of the testing software are guaranteed. The problem of compatibility of the information security testing method and the cloud calculation is solved, and the method can be used for security evaluating and testing of the cloud infrastructure.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a security evaluation method for cloud infrastructure. Background technique [0002] Cloud infrastructure: refers to the general term for the software and hardware systems built to support various cloud computing services, including physical infrastructure resources and virtual infrastructure resources. Virtual infrastructure resources are virtual resources built using virtualization technology on the basis of physical infrastructure resources, involving a series of hardware and software resources such as operating systems, storage, networks, and CPUs. [0003] Information security subjects: According to the different fields involved in information system security, it is divided into subjects such as system security, behavioral security, data security, network security, and terminal security. [0004] Information security evaluation: Using manual, semi-automated and...

AI Technical Summary

Problems solved by technology

However, the existing public information rarely discusses the architecture of the test analysis module, that is, whether it is processed by a single node, and if it is processed by a single node, it will fall into the problem of "C / S" architecture, that is, a single node is easy to fall into the load overload high situation

If multiple servers or clusters are used, it will be more troublesome to deal with the import and storage of massive evaluation data between the collection terminal and the background storage system

Moreover, it is difficult to estimate the demand for computing and storage resources in advance, which may lead to the discovery that the existing resources cannot keep up with the actual needs during the evaluation process, and it is difficult to allocate for a while, which affects the evaluation process; at the same time, allocating too many resources is likely to cause waste. not flexible enough

[0021] 3. Deploying agents in the cloud infrastructure to collect evaluation data, and self-reporting data to the background may easily cause conflicts between information, which will interfere with the analysis and processing work of the background and affect the evaluation conclusion

[0022] In general, there is still a lack of information security evaluation devices and methods that adapt to the characteristics of cloud computing

Images