Cloud platform data leakage path identification method based on graph computing technology

Abstract

The invention relates to the technical field of computer information systems, and discloses a cloud platform data leakage path identification method based on graph computing technology. It includes several steps of data leakage trigger set setting, event impact path collection acquisition, and data leakage behavior path search. The above technical solution first sets a trigger behavior set that may trigger leakage, and then builds a subgraph based on the relationship degree, filters out the resources and the farthest behavior, obtains the set of elements that affect the path, and finally uses the starting point, the necessary point, and the end point to find it. The behavior path of data leakage can be found out; through this process, the data leakage behavior sequence hidden in the normal behavior sequence can be found, and the behavior of the data leakage scenario can be restored to the maximum extent.

Description

technical field [0001] The invention relates to the technical field of computer information systems, in particular to a cloud platform data leakage path identification method based on graph computing technology. Background technique [0002] With the vigorous development of cloud computing technology, the use of cloud platforms for IT operation and maintenance has become the mainstream in the industry. However, the identification method of operation behaviors on cloud platforms mainly relies on single-item matching of collected text data through regular expressions. To realize the recognition and extraction of a single behavior, there is still a lack of an effective and general method for the recognition of the second-degree hidden behavior generated by multiple behavior sets. However, most of the behaviors that lead to data leakage on the cloud platform are actually hidden in normal operation behaviors, such as taking a snapshot of an already created virtual machine, and th...

AI Technical Summary

Problems solved by technology

How to identify hidden leaked data from a set of normal operation behavior sequences (the operation currently lacks a set of effective methods

[0003] At the same time, because the operation behavior of the cloud platform relies on many related resources, one behavior often directly triggers another behavior. For example, creating a virtual machine is often accompanied by creating a network card operation. Because the correlation between these behaviors has the characteristics of the cloud platform, The scope of influence of the traditional logical evaluation cannot be applied, and there is a lack of corresponding methods and technical means for how to effectively associate the operation behavior of the cloud platform triggered by the association with the original operation behavior for evaluation and analysis

[0004] Aiming at the above problems, a general method of using graph computing technology to identify cloud platform operation behaviors that lead to cloud platform data leakage is designed.

Images