Method and device for finding malicious service provider of composite service in cloud system

Abstract

The invention relates to a method and a device for searching a malicious service provider of a combined service in a cloud system. The method comprises the steps of inputting original data to a plurality of service providers with same function so that the plurality of service providers return data processing results; receiving the data processing results of the plurality of service providers, comparing the data processing results of the plurality of service providers, obtaining function consistency relationship and function inconsistency relationship of the plurality of service providers; and determining the malicious service provider according to the function consistency relationship and the function inconsistency relationship of the plurality of service providers. According to the method and the device provided by the embodiment of the invention, an attacker can be effectively disclosed, thereby finding the malicious service provider. Even a majority of malicious service providers exist, the attackers can be effectively determined. Furthermore coordinated attack can be restrained and attack damage range is restrained. Furthermore the method and the device do not require supporting of any specific hardware or security kernel. The method and the device has high practicability for the large cloud system.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a method and device for searching malicious service providers of combined services in a cloud system. Background technique [0002] Cloud computing has become a cost-effective resource leasing model, which eliminates the need for users to maintain complex physical computing infrastructure by themselves. Software-as-a-service (SaaS) cloud systems (for example, Amazon Web Services (AWS) and Google AppEngine) are built on the concepts of software as a service and service-oriented architecture (SOA), which enable application service providers to Computing infrastructure implements their applications. Our work mainly focuses on data stream processing services. [0003] However, cloud computing infrastructure is often shared by service providers, which makes them vulnerable to malicious attacks. For example, an attacker can impersonate a legitimate service provider to prov...

AI Technical Summary

Problems solved by technology

[0003] However, cloud computing infrastructure is often shared among service providers, making them vulnerable to malicious attacks

For example, an attacker can pretend to be a legitimate service provider to provide fake service components, causing users to receive untrue data processing

Although the confidentiality and privacy protection issues have been extensively studied in previous studies, the service data integrity authentication issue has not been well resolved.

However, in a large multi-tenant cloud system, multiple malicious attackers may carry out cooperative attacks on some specific service functions.

Therefore, when there are a majority of malicious attackers, the method of detecting malicious behavior using majority voting cannot accurately identify the attacker

Images