Cloud host-oriented full-flow network access protection method and device

Abstract

The invention relates to the technical field of cloud computing and information security, in particular to a cloud host full-flow network access protection method and device. Under the traditional north-south flow protection, the protection capability of the east-west level of cloud resources is realized through the cloud computing service arrangement and automation technology, and the protection capability is complementary with the north-south flow protection to form full-flow network access protection. The method specifically comprises the following steps: establishing a response rule of a distributed firewall, establishing a response rule of a full-flow firewall, configuring a full-flow protection strategy, obtaining a full-flow protection strategy demand and responding, thereby automatically realizing protection of full-flow network access. The invention further provides a corresponding device, and the problems that the professional requirement of a traditional firewall technology is high, protection strategy configuration conflicts exist in a protection mode, protection strategy configuration among multiple cloud hosts lacks collaboration, operation steps are tedious and the like are solved.

Description

technical field [0001] The invention relates to the technical field of cloud computing and information security, in particular to a method and device for cloud host full-flow network access protection. Background technique [0002] A firewall is a system composed of computer hardware and software. It is deployed on the network border and serves as a bridge between the internal network and the external network. Internal network data security. Firewall technology is an applied security technology based on network technology and information security technology. Almost all enterprise internal networks and external networks (such as the Internet) will be equipped with firewalls at the borders connecting them. Firewalls can perform security filtering and security isolation. Harmful network security information and behaviors such as external network attacks and intrusions. But in the face of cloud hosts, traditional network firewall technology can no longer meet the requirements ...

AI Technical Summary

Problems solved by technology

[0005] In order to solve the problem that traditional firewall technology cannot meet the security protection of existing cloud hosts, the north-south protection of traditional cloud hosts requires high professional technical requirements through local firewalls, and the east-west direction of cloud hosts Conflicts with the north-south traffic protection method are likely to exist in the protection policy configuration, and the protection policy configuration of the east-west and north-south traffic related to multiple cloud hosts lacks synergy and cumbersome operation steps. Method and device for cloud host full-flow network access protection

Images