Method and system for isolating clouds

Abstract

The present invention proposes a method and system for isolating the cloud, including: the isolating cloud receives the request sent by the user terminal through the Internet; the isolating cloud analyzes the received request, and inquires whether the file and data corresponding to the request are stored on the isolating cloud , if there is a direct call to the corresponding file and data and the result is sent to the user terminal on the Internet; otherwise, the request is forwarded to the cloud computing platform through the IP address of the second network segment connected to the intranet; the cloud computing platform analyzes the request And locate the virtual host on the cloud that stores the corresponding files and data, or extract or calculate and process the corresponding data and send it to the isolation cloud; the isolation cloud receives the data sent back from the cloud device, and then sends it to the Internet user. The present invention sets up an isolated cloud between the traditional cloud architecture and the Internet, and the cloud computing platform no longer directly accepts access from the Internet, nor bears cloud attacks from the Internet.

Description

Technical field [0001] The present invention relates to the field of Internet and cloud computing safety, and more particularly to a method and system for isolating clouds. Background technique [0002] At present, cloud services have become common services in the Internet, which exceeds large scale, virtualization, high reliability, versatility, high scalability, on-demand service, and low-cost, etc. have brought great convenience to Internet users. On the other hand, with the continuous spread of cloud computing, security issues have become an important factor in restricting its development. [0003] Gartner 2009 survey results showed that CTOs of more than 70% of the company believed that the recent primary cause of cloud computing was that there were data security and privacy worries. [0004] Recently, Amazon, Google and other cloud computing initiators have continuously exploding various safety incidents have more concerns. [0005] For example, March 2009, Google had a l...

AI Technical Summary

Problems solved by technology

[0015] (2) Using a vulnerability to cause the crash of the host machine, causing all virtual machines on the host machine to stop serving;

[0023] (3) The web server on the cloud itself is more insecure and will be threatened by two attacks: from the front Internet and from other compromised web virtual machines on the cloud from the back

[0024] (4) Unable to defend against "unknown attacks": Today's cloud security can only be protected by peripheral security products such as FW and WAF, and is helpless against new "unknown attacks"

[0026] On the one hand, the virtualization vulnerabilities of the cloud broke out, and on the other hand, cloud security vulnerabilities are difficult to fix; coupled with the unprecedentedly dangerous Internet environment in the era of cyber warfare, unknown attacks are mainstream

Traditional security protection measures, including cloud security protection measures, are increasingly insufficient, and cannot fundamentally solve these security vulnerabilities or hidden dangers caused by the "weak security" of the cloud computing platform

If this problem is not solved, it will affect the future of cloud computing

[0027] For this reason, the present invention proposes brand-new solution and technology, solves the security problem of above-mentioned cloud computing

Images