Cloud host security detection system and method

Abstract

The invention discloses a cloud host security detection system and method. The system comprises: a data acquisition module, which is suitable for acquiring cloud host data; a data analysis module which is suitable for carrying out security analysis on the cloud host data to obtain a security analysis result; a result processing module which is suitable for intercepting unsafe behaviors on the cloud host according to the safety analysis result; and a display module which is suitable for displaying the acquired cloud host data, the security analysis result and the interception processing result.The cloud host security detection system is based on the host. Cloud host data generated on a protected cloud host are continuously collected and analyzed; according to the security analysis result,corresponding defensive measures are taken to immediately terminate the occurrence of malicious behaviors, the attack behaviors of attackers are thoroughly blocked, the network security risk faced bythe cloud host in the cloud environment is solved, an enterprise is helped to construct a cloud host security protection system, and the cloud host is prevented from being attacked by the network.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a cloud host security detection system and method. Background technique [0002] The cloud host provides a simple, efficient, safe, reliable, and elastically scalable computing service. The use of the cloud host can simplify the development and deployment process, reduce operation and maintenance costs, and build an on-demand expansion website architecture, so as to better adapt to the rapid and changeable Internet applications. characteristic. While cloud hosting provides convenient services, it is also more prone to security issues. The convenient access feature of the cloud host will make the cloud host and the data on the cloud more and more complicated. Therefore, it is extremely important to effectively ensure the security of the cloud host. [0003] Some cloud host intrusion detection systems that currently exist, such as firewalls, WAFs, IDS, IPS and other products, a...

AI Technical Summary

Problems solved by technology

[0003] Some cloud host intrusion detection systems that currently exist, such as firewalls, WAFs, IDS, IPS and other products, are mainly based on signature detection and can only play a role in security protection against attacks. If hackers bypass the protection of traditional firewalls and other security products After successfully obtaining the authority of the target host, security products such as traditional firewalls cannot further prevent the attacker from attacking.

In addition, IDS and IPS products require in-depth analysis of traffic packets, which consume a lot of performance and easily affect the normal business of the server

Images