Cloud data security identification and classification method

Abstract

The invention discloses a cloud data security identification and classification method. The method comprises the following steps: separating flow into a plurality of flow bubbles according to manifold tonality; carrying out attack event identification on repetitive behaviors in the bubbles; matching the interaction mode features in the flow bubbles with attack behavior interaction mode features, and acquiring attack behavior description corresponding to the flow; detecting a heartbeat packet sequence of the traffic through clustering processing; and accurately classifying the traffic according to the heartbeat packet sequence. The encryption attack behavior is analyzed in stages by using a topology method and the characteristics of the VPN. Flow is divided into a plurality of flow bubbles, repetitive behaviors in the flow bubbles are concluded, and occurrence of attack events is speculated. The stable interaction sequence features are analyzed to obtain description of attack behaviors, and And finally, heartbeat characteristics are analyzed through the microscopic periodic characteristics of the flow. Therefore, in combination with the attack behavior description and the corresponding original data stream, the attack behaviors are finely classified.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a cloud data security identification and classification method. Background technique [0002] The function of a virtual private network (Virtual Private Network, VPN) is to establish a private network on a public network for encrypted communication. VPNs are widely used in enterprise networks. The main transmission channel of cloud computing is the Internet, which is also where malicious attacks often occur. Users can safely store corporate and personal data on the cloud. Not only do they need to restrict cloud service providers from viewing user information, but they also need reliable security technology to improve users' security confidence in the cloud computing environment. In order to ensure data security, the communication data between the VPN server and the client is encrypted. With data encryption, it can be considered that data is transmitted securely on a ded...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiment of the present invention provides a cloud data security identification and classification method to solve the problems caused by VPN tunnel traffic encryption in the prior art It is difficult to analyze the attack behavior under VPN traffic

Images