A cloud platform network covert channel multi-scale detection system

Abstract

The invention discloses a cloud platform network covert channel multi-scale detection system in the technical field of network security, including a data acquisition module, a data preprocessing module, a covert channel detection engine, and a visualization module. The data acquisition module and the data preprocessing module run in each cloud server to collect multi-scale network environment parameters in each cloud server. The covert channel detection engine runs in the covert channel detection and analysis center, builds multi-scale detection vectors for comprehensive analysis of covert channels, and displays the detection situation through the visualization module. The present invention combines the network communication mechanism and network topology structure in the cloud platform, collects the network environment parameters in the cloud server, and formulates the concealment of the cloud platform based on multiple scales such as data packets, data streams, session stream morphological parameters, statistical parameters, and traffic models. The channel detection method improves the detection accuracy of network covert channels and solves the security risks of network covert channels under the cloud platform.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a cloud platform network covert channel multi-scale detection system. Background technique [0002] Cloud computing network is an extension of traditional Internet network, and its network environment security will be threatened from many aspects. Among them, data leakage is a huge hazard that cloud platforms must face. The network covert channel is a covert communication technology established with a legal network communication channel as a carrier, which can be used as a C&C channel and a confidential data transmission channel. [0003] The network form, topology, communication mechanism, network virtualization technology and other specificities of the cloud computing network make its network environment and network data flow different from the traditional Internet. At present, the covert channel detection on the cloud platform is mainly aimed at the virtual machine ...

AI Technical Summary

Problems solved by technology

At present, the covert channel detection on the cloud platform is mainly aimed at the virtual machine co-resident attack using memory sharing, and there is a lack of covert channel detection with network traffic as the carrier.

Images