Security access control method, device and system based on cloud environment

Abstract

The invention discloses a security access control method based on a cloud environment. The method comprises the following steps: obtaining the mirror image flow of a business virtual machine through an api of a cloud management platform, and transmitting the mirror image flow to a cloud security audit virtual machine. The process does not need to change the network environment and architecture of the business virtual machine, and only needs to call the api of the cloud management platform, so that security access control can be realized through the cloud security audit virtual machine without changing the network architecture of the cloud service host. The invention also provides a security access control device based on the cloud environment and a security access control system based on the cloud environment, which also have the above beneficial effects.

Description

technical field [0001] The present invention relates to the technical field of cloud computing, in particular to a cloud-based security access control method, a cloud-based security access control device and a cloud-based security access control system. Background technique [0002] With the vigorous development of cloud computing, the establishment of cloud data centers has become the general trend. However, in the face of increasingly massive data and increasingly difficult to find virus threats in the cloud environment, it is often difficult for traditional devices to meet security requirements while ensuring performance requirements. At present, major manufacturers have launched their own cloud security products to empower security capabilities on the cloud. However, the security products on the market still follow the architectural logic of traditional security products. Some features provide targeted solutions. At the same time, security vendors cannot transform the n...

AI Technical Summary

Problems solved by technology

This kind of security product deployment method is relatively complicated, and the network changes of the business host on the cloud are relatively large; and once the cloud security product is down, it is difficult to realize business migration; in addition, it does not make full use of the original security capability resources of the cloud platform, resulting in certain degree of duplication

Images