System and method for preventing attacks by self-learning in cloud environment

Abstract

The invention relates to the cloud security management technology, and aims to provide a system and method for preventing attacks by self-learning in a cloud environment. The system for preventing the attacks by self-learning in the cloud environment comprises a management end and a monitoring end; the management end and the monitoring end use a C / S architecture; the management end is deployed at a Server end, and the monitoring end is deployed in each host in the cloud environment. The system for preventing the attacks by self-learning in the cloud environment provided by the invention forms a behavior rule base after host behavior learning, which greatly reduces the difficulty and complexity of host attack prevention in the cloud environment, thereby improving the efficiency of the host attack prevention in the cloud environment; and besides, the system can flexibly adjust the behavior rule base, which greatly improves the accuracy of the host attack prevention in the cloud environment.

Description

technical field [0001] The invention relates to the technical field of cloud security management, in particular to a system and method for preventing attacks through self-learning in a cloud environment. Background technique [0002] The cloud environment refers to the unification of a series of resources such as hardware, software, and network in a wide area network or a local area network to realize data calculation, storage, processing, and sharing. With the improvement and development of cloud services, more and more cloud users are connected to each other through cloud technology. Due to the high concentration of cloud users and information resources, the security incidents and risks caused by the cloud environment are much higher than those of traditional applications. Since 2009, major security incidents have occurred in the cloud computing servers of well-known IT companies such as Microsoft, Amazon, and Google, which have affected the information servers of many cl...

AI Technical Summary

Problems solved by technology

However, this method detects through a pre-set feature library, which cannot detect and warn some new intrusion behaviors and software in time, and is prone to false positives or missed negatives.

Images