Cloud data protection method, cloud server, system

Abstract

The present application relates to a kernel-based cloud data protection method, cloud server, system, computer equipment and storage medium, the method includes: the kernel program of the cloud server obtains a security policy and takes over the file operation function of the cloud server, wherein the security policy The permission array in is the corresponding relationship between the process and the folder permission. Obtain the first process identification number of the first process, query the permission array, and judge whether the first process identification number exists in the permission array. If so, judge the first process identification number. Whether the folder is a folder that is allowed to be accessed by the first process identification number, and if so, the file operation function allows the first process to operate on the first folder. According to the above method, the file operation authority can be separated from the administrator authority, and only associated with the user, which enhances the protection of the data on the cloud and improves the security of the data on the cloud.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a kernel-based cloud data protection method, cloud server, system, computer equipment and storage medium. Background technique [0002] With the development of network technology, cloud storage technology has appeared. At present, many enterprises and individuals have used the cloud to store data on a large scale. The information security of these cloud data is particularly important. In related technologies, authority control is usually used to Protect important files from illegal access. In addition, various encryption technologies are also applied to encrypt important files to protect the plaintext of important files from being obtained maliciously. However, the security protection methods for program loading and file reading and writing on the cloud server in related technologies are mainly for protection against intrusions outside the system, for example, ...

AI Technical Summary

Problems solved by technology

However, the security protection methods for program loading and file reading and writing on the cloud server in related technologies are mainly for protection against intrusions outside the system, for example, to authenticate visitors; malicious behaviors from inside the cloud server system are still It will pose a security threat to data on the cloud. For example, an intruder can easily access files on the cloud server after obtaining administrator rights; the administrator of the cloud server can also read and write all important files deployed on the cloud

[0003] In related technologies, there is no effective solution to the problem of illegally accessing data on the cloud by using the identity of the system or device administrator

Images