Cloud platform network covert channel multi-scale detection system

Abstract

The invention discloses a cloud platform network covert channel multi-scale detection system in the technical field of network security. The cloud platform network covert channel multi-scale detectionsystem comprises a data acquisition module, a data preprocessing module, a covert channel detection engine and a visualization module. The data acquisition module and the data preprocessing module operate in each cloud server and collect multi-scale network environment parameters in each cloud server. The covert channel detection engine operates in a covert channel detection analysis center, constructs a multi-scale detection vector to perform covert channel comprehensive analysis, and displays the detection condition through a visualization module. According to the method, in combination with a network communication mechanism and a network topology structure in the cloud platform, network environment parameters in the cloud server are collected, and the cloud platform covert channel detection method is formulated according to multiple scales such as morphological parameters, statistical parameters and traffic models of data packets, data streams and session streams, so that the detection accuracy of the network covert channel is improved, and the potential safety hazard of a network covert channel under a cloud platform is solved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a cloud platform network covert channel multi-scale detection system. Background technique [0002] Cloud computing network is an extension of traditional Internet network, and its network environment security will be threatened from many aspects. Among them, data leakage is a huge hazard that cloud platforms must face. The network covert channel is a covert communication technology established with a legal network communication channel as a carrier, which can be used as a C&C channel and a confidential data transmission channel. [0003] The network form, topology, communication mechanism, network virtualization technology and other specificities of the cloud computing network make its network environment and network data flow different from the traditional Internet. At present, the covert channel detection on the cloud platform is mainly aimed at the virtual machine ...

AI Technical Summary

Problems solved by technology

At present, the covert channel detection on the cloud platform is mainly aimed at the virtual machine co-resident attack using memory sharing, and there is a lack of covert channel detection with network traffic as the carrier.

Images