Intelligent virus invasion detection system for cloud platform server and method thereof

Abstract

The invention relates to the technical field of cloud computing security, and particularly relates to an intelligent virus invasion detection system for a cloud platform server and a method thereof. The system disclosed by the invention comprises a cloud platform monitoring subsystem, a cloud platform custom local vulnerability library and a cloud platform crawler subsystem. The method includes the following steps: enabling the cloud platform crawler subsystem to regularly obtain platform-related vulnerabilities from various official website vulnerability libraries to send to the cloud platform custom local vulnerability library; enabling the cloud platform monitoring subsystem to regularly monitor process information of a service host, performing the next step if abnormalities are found,and otherwise, repeating the current step; automatically detecting current abnormal process information of the service host according to a virus process feature library, and performing analysis to obtain abnormal keywords; further scanning the cloud platform custom local vulnerability library based on the abnormal keywords to obtain related vulnerability information; and enabling the cloud platform monitoring subsystem to generate alarms and publish the abnormal process information of the service host and the related vulnerability information. According to the scheme of the invention, a cloudplatform can intelligently monitor the virus invasion of the service host, and a method for quickly solving intrusive viruses can be provided for cloud platform administrators and users.

Description

technical field [0001] The invention relates to the technical field of cloud computing security, in particular to a cloud platform server intelligent virus intrusion detection system and a method thereof. Background technique [0002] With the development of cloud computing, more and more enterprises, schools and government agencies have begun to adopt cloud platforms. The cloud platform has brought many advantages such as resource elastic expansion and efficient utilization, but at the same time it has also created many new problems, among which the information security of the cloud platform is particularly obvious. Customers use the cloud servers on the cloud platform to build their own business systems and provide external services. Due to the open services and the multi-server characteristics of the cloud platform itself, some hackers intentionally carry out virus invasion on the customer's business host, and then attack the entire cloud platform . At present, the secu...

AI Technical Summary

Problems solved by technology

At present, the security measures adopted by various cloud platforms usually use firewalls and other security auditing devices or system access. These protection methods have advantages and disadvantages. For example, firewalls can only protect against network attacks at the network level, but it is difficult to do so. Protection of specific business data; the access of security audit equipment or systems to the cloud platform is generally in the border area of ​​the network, which is not only costly and laborious, but also difficult to guarantee the virus protection of specific servers on the cloud platform; especially the use of general security audit equipment Or the system cannot customize the relevant vulnerability database according to the specific conditions of the cloud platform, and cannot perform intelligent monitoring of server virus intrusion detection

Images