Security cloud management system construction method and device based on mimicry defense

Abstract

The invention provides a security cloud management system construction method and device based on mimicry defense. The method comprises the following steps: constructing a plurality of cloud management systems by using diversified compiling tools, wherein the plurality of cloud management systems have the same function but different structures; constructing a request proxy forwarding unit for receiving a user request, establishing a request queue and forwarding the user request to the plurality of cloud management systems according to the control information; constructing a request agency judgment unit for processing responses of the plurality of cloud management systems to the same user request according to a preset request processing and deployment judgment process, and forwarding a processing result to the Openstack execution component; and constructing a response forwarding unit and a reply response judgment unit, wherein the response forwarding unit and the reply response judgmentunit are used for processing the execution result of the Openstack execution component and the response of the plurality of cloud management systems to the execution result according to a preset response mimicry judgment and output flow. According to the method and device, the operation information of the administrator on the network can be prevented from being stolen and maliciously tampered, and the operation on the cloud system is safe and reliable.

Description

technical field [0001] The invention relates to the technical field of cloud computing network space security, in particular to a method and device for constructing a security cloud management system based on mimic defense. Background technique [0002] With the popularity and development of computers, people's dependence on functions such as computing and storage has penetrated into all aspects of work and life. However, the traditional local computing model is limited by expensive hardware costs and complex management operations, and it is increasingly difficult to meet the needs of individuals, enterprises, and governments for cheap, efficient, convenient, and flexible computing services. Therefore, a new computing mode——cloud computing emerges as the times require. Cloud computing has the characteristics and advantages of on-demand services, convenient access, metering and charging, rapid deployment and flexible management. The emergence of OpenStack is a milestone in ...

AI Technical Summary

Problems solved by technology

[0004] At present, when governments, enterprises, and institutions build cloud platforms, they often use Openstack for incremental development. As Openstack is an open source software, its source code vulnerabilities are easily obtained by attackers.

Most of the current public cloud providers adopt a single architecture for the convenience of management and development, such as literature (Chen Qiyun, Chen Zhikang. Research on public cloud security risks and countermeasures based on model analysis[J]. Modern Telecom Technology, 2012(8):6- As mentioned in 10), the singleness, homogeneity, vulnerability, and prevalence of backdoors in the cloud management system magnify the possibility and harm of the cloud management system being attacked

Images