Method and system for detecting information leakage of cloud service

Abstract

At least a portion of the method is performed by a computing device includes at least one processor. The method includes identifying a cloud-based service to provide a remote software service to a client organization; Extracting a list of customers using cloud-based services from publicly accessible pages of cloud-based services; Retrieving, for each customer in the customer list, at least one link to a customer page on a cloud-based service, the link representing a method for a customer to access a remote software service provided by the cloud-based service; Analyzing at least one risk factorfor each identified customer page; Based on an analysis of the risk score of the computing service, the risk score represents an overall estimate of the security risk to the customer organization using cloud-based services.

Description

technical field [0001] The present invention relates to the technical field of cloud service information security, in particular to a cloud service information leakage detection method and system. Background technique [0002] Although the client in the current user environment adopts a variety of anti-reversible and anti-debugging methods to prevent the leakage of user privacy information, the main method for the client to prevent source code leakage and key and other important information leakage in the prior art is through: [0003] Code obfuscation: Make the source code unreadable by substituting variables, adding some constant changes, changing the order, etc.; packing: replacing and packaging the binary files of the client, and directly inserting some binary protection; encryption: converting important The content is encrypted to prevent direct exposure of passwords; anti-debugging: detect whether the application itself is being debugged by starting a process of mutual...

AI Technical Summary

Problems solved by technology

However, the defense method cannot completely avoid information leakage. As long as the client is left in the hands of the attacker for a long enough time, it will inevitably encounter the fate of being cracked, and the important information saved by the client, such as keys, will be destroyed. leaked out

Images