Solution for cloud Web application to cope with virtual host layer attacks

Abstract

The invention discloses a solution for a cloud Web application to cope with virtual host layer attacks. The method comprises the steps: creating heterogeneous servers on the cloud, and achieving the data consistency of all the servers through shared storage; achieving the dynamic change of the server through a certain flow forwarding strategy, so as to present a dynamic change target which is difficult to observe and predict for an attacker, thereby increasing the attack difficulty and cost for unknown vulnerabilities and backdoors; and finally, through offline and self-healing of the attackedserver, achieving a purpose that the service is not interrupted. According to the invention, dynamic heterogeneous redundant server deployment is realized, and known and unknown attacks in the network can be solved.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to the technical field of endogenous defense of network security, and in particular to a solution method for web applications on the cloud to deal with virtual host layer attacks. Background technique [0002] With the continuous evolution of the Internet and the continuous evolution of attack technologies, network attacks present the characteristics of "concealment, coordination, and precision", and network security is in a situation of "easy to attack but difficult to defend". In order to completely change the traditional protection mode of passive response such as "blocking and killing", and form an active defense capability, endogenous security defense technology has emerged as the times require. Endogenous security defense technology refers to an active defense technology proposed based on the internal dynamics, heterogeneity, redundancy, and self-healing structure of ...

AI Technical Summary

Problems solved by technology

There are three defects in such defense measures: firstly, the attacker can use the loopholes in the existing defense measures to attack; secondly, the attacker can also exploit the loopholes in the server itself or even the loopholes in the virtual machine operating system to attack; thirdly, the attacked The server may not be repaired immediately in a short period of time, resulting in long-term business interruption

[0004] Therefore, the existing defense methods cannot meet the security requirements of web servers on the cloud, and a more secure and efficient defense method is urgently needed to increase the attacker's attack cost and enable the server to quickly self-heal after being attacked

Images