Cloud resource pool data security detection method and system

Abstract

The invention discloses a cloud resource pool data security detection method comprising the steps of acquiring established sensitive data; acquiring export data drained from a cloud resource pool; scanning and recognizing the sensitive data in the export data; building a sensitive data life cycle, and hierarchically managing the sensitive data; capturing a host virtual machine of the sensitive data in a cloud resource environment, and monitoring traffic of the virtual machine; and analyzing the sensitive data and abnormal operation behaviors of the host virtual machine of the sensitive data, and giving an alarm. In addition, the invention also provides a cloud resource pool sensitive data security detection system comprising a control module, a collection module, a processing module, a supervising module and an auditing module. By using the method provided by the invention, a full life cycle security control on links such as building, generation, utilization and destroying of various kinds of sensitive data during business data calling and transmission, and business interaction and migration processes under the cloud computing environment is achieved, and thus abnormal and illegal behaviors can be found.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a cloud resource pool data security detection and protection system and a method thereof. Background technique [0002] The main difference between cloud resource pool and traditional platform construction in terms of system composition is that resources are virtualized to form a unified resource pool, which simplifies resource configuration and management, improves hardware utilization, and realizes the flexibility and elasticity of cloud computing. The introduction of the virtual layer makes the security protection system with access control as the core very different from the traditional business platform construction protection system. In addition to traditional host security, network security, etc., it also needs to include special virtualization security in cloud computing. . [0003] In the cloud resource pool, CRM and other business system hosts ...

Images