Isolation cloud method and system

Abstract

The present invention provides an isolation cloud method and system. The method comprises the steps that: the isolation cloud receives a request sent by a user terminal through an internet; the isolation cloud analyzes the received request, inquires whether a file and data corresponding to the request are stored on the isolation cloud or not, directly transfer the corresponding file and data if yes, and sends the result to the user terminal on the internet, or else, forwards the request to a cloud computing platform through a second network section IP address of an intranet; the cloud computing platform analyzes the request and locates a visual host on the cloud configured to store the corresponding file and data, or extracts or computes and processes the corresponding data and sends the data to the isolation cloud; and the isolation cloud receives the data returned by a cloud device and then sends the data to an internet user. The isolation cloud method and system are provided with the isolation cloud between a traditional cloud configuration and the internet, and the cloud computing platform does not directly receive the access from the internet and does not bear the cloud attachfrom the internet.

Description

technical field [0001] The invention relates to the technical field of Internet and cloud computing security, in particular to a method and system for isolating clouds. Background technique [0002] At present, cloud service has become a common service in the Internet field. Its advantages such as ultra-large scale, virtualization, high reliability, versatility, high scalability, on-demand service, and low cost all bring great convenience to Internet users. But on the other hand, with the continuous popularization of cloud computing, security issues have become an important factor restricting its development. [0003] According to Gartner's 2009 survey, more than 70% of the CTOs of the interviewed companies believe that the primary reason for not adopting cloud computing in the near future is the concern about data security and privacy. [0004] And recently, Amazon, Google and other cloud computing initiators continue to break out various security incidents, which aggravat...

AI Technical Summary

Problems solved by technology

[0015] (2) Using a vulnerability to cause the crash of the host machine, causing all virtual machines on the host machine to stop serving;

[0023] (3) The web server on the cloud itself is more insecure and will be threatened by two attacks: from the front Internet and from other compromised web virtual machines on the cloud from the back

[0024] (4) Unable to defend against "unknown attacks": Today's cloud security can only be protected by peripheral security products such as FW and WAF, and is helpless against new "unknown attacks"

[0026] On the one hand, the virtualization vulnerabilities of the cloud broke out, and on the other hand, cloud security vulnerabilities are difficult to fix; coupled with the unprecedentedly dangerous Internet environment in the era of cyber warfare, unknown attacks are mainstream

Traditional security protection measures, including cloud security protection measures, are increasingly insufficient, and cannot fundamentally solve these security vulnerabilities or hidden dangers caused by the "weak security" of the cloud computing platform

If this problem is not solved, it will affect the future of cloud computing

[0027] For this reason, the present invention proposes brand-new solution and technology, solves the security problem of above-mentioned cloud computing

Images