Block chain-based security auditing system and auditing method

Abstract

The invention provides a security auditing system and auditing method based on a block chain. The system comprises a plurality of data storage nodes and a plurality of auditing nodes, each data storage node is used for collecting log data of a docked object and storing the log data in a block chain, and the object at least comprises one of a cloud service provider, a cloud tenant, a user and a supervisor; each auditing node is used for acquiring required log data from the data storage node when receiving an auditing service request of a butted object; and analyzing and processing the obtained log data. As the data of the cloud service provider, the cloud tenant, the supervisor and the user are all stored on the block chain, transparent supervision of audit data of each party is realized, and the data security is effectively ensured by storing the data generated in the business processing process of each party on the block chain.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular, to a blockchain-based security audit system and audit method. Background technique [0002] At present, the penetration of the Internet into various fields is accelerating, and more and more organizations are migrating their businesses to cloud service platforms. Using cloud service platforms to manage business operations and provide business services has gradually become the mainstream trend. However, because cloud tenants cannot fully grasp all the resources in the cloud service platform, and cloud service providers only audit internal operational behavior data, that is, cloud service providers and cloud tenants share security responsibilities according to the service model, and cloud service providers and cloud tenants share security responsibilities. Conduct security audits within the scope of resources under their control. Generally, the audit data of cl...

AI Technical Summary

Problems solved by technology

However, because cloud tenants cannot fully grasp all resources in the cloud service platform, and cloud service providers only audit internal operational behavior data, that is: cloud service providers and cloud tenants share security responsibilities according to the service model, cloud service providers and cloud tenants Security audits are conducted separately within the scope of resources under their respective control. In general, the audit data of cloud service providers will not be disclosed to cloud tenants in real time and proactively, and the audit data of cloud tenants will not be provided to cloud service providers and cloud users in general. Customers of tenants are used for their own internal management

[0003] However, in the current above-mentioned cloud service platform, because the audit data of the cloud service provider is internal operation behavior data, it is generally not provided to the cloud tenant, so that the cloud tenant cannot audit the operation behavior of the part of the resources controlled by the cloud service provider. This part of the audit data can only be used by cloud service providers for internal audit of employees, operation and maintenance personnel, etc., lack of behavioral supervision of cloud service platforms, cloud tenant customers can not conduct behavioral supervision of cloud tenants and cloud service platforms, resulting in cloud service Lack of security trust between vendors and cloud tenants, cloud tenants and customers, especially when security incidents occur, due to the inability to share audit data, there may be situations where responsibilities cannot be defined

Images