Information security protection method and system based on cloud computing
The system addresses data vulnerabilities in cloud computing by implementing modules for authentication, encryption, and risk analysis, ensuring robust security and privacy through symmetric encryption and strategic risk management.
Patent Information
- Application Number
- CN202410923559.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-07-10
- Publication Date
- 2024-12-13
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
Current cloud computing-based information security protection systems lack symmetric encryption, leading to vulnerabilities that expose user information to attacks and potential data leakage.
Implement an information security protection system with an access control module, data encryption module, security monitoring module, malicious code protection module, and security policy formulation, and security policy formulation module, and security policy formulation module, which includes an access control module, a data encryption module, a security monitoring module, a malicious code protection module, a security policy formulation module, a security policy formulation module, and security solution module, and a security policy formulation module, which collects user identity authentication information, calculates authentication accuracy, encrypts user data, monitors security events, analyzes malicious risks, and formulates security strategies using symmetric encryption.
Enhances data security by preventing unauthorized access and attacks, reducing false alarms, identifying high-risk threats, optimizing network performance, and providing a comprehensive security risk assessment to protect user privacy.
Smart Images
Figure CN119128921A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of information security technology, and in particular to an information security protection method and system based on cloud computing. Background Art
[0002] An information security protection system based on cloud computing refers to a system that uses cloud computing technology to provide security protection services to users. This system deploys security protection functions in the cloud, and users can interact with the cloud system through the Internet or a private network to achieve effective information security protection. Through the cloud security monitoring system, the user's network traffic is monitored and detected in real time, and potential security threats such as malware and network attacks are discovered and responded to in a timely manner. The cloud system is used to perform regular vulnerability scanning and vulnerability management on the user's system to help users promptly discover and repair security vulnerabilities in the system and improve the security of the system. At the same time, the cloud security system can provide network access control and identity authentication services to ensure control of user access rights and prevent unauthorized users from entering the system or accessing sensitive information.
[0003] Currently, most cloud computing-based information security protection systems do not use symmetric encryption to encrypt data information, so there is a problem of user information being attacked and private information being leaked. Summary of the invention
[0004] 1. Technical issues to be solved
[0005] In view of the deficiencies in the prior art, the present invention provides an information security protection method and system based on cloud computing, which has the functions of collecting user identity authentication information ST, access request log FR and user authority information YQ through an access control module, calculating the user identity authentication accuracy Yhzq according to the above data, and encrypting and protecting the authorized user data Yhsj according to a formula to obtain encrypted user data Jmsj. After the user data is encrypted, the security monitoring module monitors the security status of the system, calculates the frequency of occurrence of security events Fspl and the abnormal behavior false alarm rate Ycwb, and the malicious code protection module further analyzes the data transmitted by the security monitoring module to calculate the malicious risk level Eyfx. The network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level. The security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module, and formulates a cloud computing information security protection strategy according to the security risk assessment index. By using a symmetric encryption data algorithm and adopting an information security protection strategy with a high protection level, it is ensured that user data is not easy to be attacked, and the information security of user private data is improved, and the above problems are solved.
[0006] (II) Technical solution
[0007] To achieve the above-mentioned purpose, the present invention provides the following technical solutions: an information security protection system based on cloud computing, comprising an access control module, a data encryption module, a security monitoring module, a malicious code protection module, a network security protection module and a security policy formulation module;
[0008] The access control module collects user identity authentication information ST, access request log FR and user authority information YQ, calculates the user identity authentication accuracy Yhzq based on the above data, and passes the authorized user request to the data encryption module;
[0009] The data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain encrypted user data Jmsj;
[0010] After the user data is encrypted, the security monitoring module monitors the security status of the system, calculates the frequency of occurrence of security events Fspl and the abnormal behavior false alarm rate Ycwb, and transmits the calculated values and detection data to the malicious code protection module;
[0011] The malicious code protection module further analyzes the data transmitted by the security monitoring module, calculates the malicious risk level Eyfx, and transmits the value to the network security protection module;
[0012] The network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module;
[0013] The security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module, and formulates a cloud computing information security protection strategy according to the security risk assessment index.
[0014] Preferably, the access control module calculates the user identity authentication accuracy Yhzq according to the formula, and the calculation formula is as follows:
[0015]
[0016] In the formula, Yhzq represents the accuracy of user identity authentication, Txp represents true positive examples, that is, the number of samples correctly identified as positive examples, Txn represents true negative examples, that is, the number of samples correctly identified as negative examples, Axp represents false positive examples, that is, the number of samples mistakenly identified as positive examples, and Axn represents false negative examples, that is, the number of samples mistakenly identified as negative examples. The accuracy value is approximately close to 1, indicating that the higher the authentication accuracy, and the closer the accuracy value is to 0, the lower the authentication accuracy.
[0017] Preferably, the data encryption module encrypts and protects the authorized user data Yhsj according to a formula to obtain encrypted user data Jmsj. The encryption formula is as follows:
[0018] Jmsj=AES(Yhsj,Myue)
[0019] In the formula, Jmsj represents encrypted user data, AES represents the symmetric encryption algorithm, Yhsj represents user data, and Myue represents the key. User data is encrypted using the AES encryption algorithm and a key to obtain encrypted user data. The key is a random number generated by the system.
[0020] Preferably, after the user data is encrypted, the security monitoring module monitors the security status of the system and calculates the frequency of occurrence of security events Fspl, and the calculation formula is as follows:
[0021]
[0022] In the formula, Fspl represents the frequency of security incidents, W i It is represented as the weight of security event type i. The value is assigned according to the impact of the security event on the system, and the value ranges from 1 to 5. i represents the number of times security event type i occurs during the observation period, T i Indicates the duration of security event type i during the observation period.
[0023] Preferably, after the user data is encrypted, the security monitoring module monitors the security status of the system and calculates the abnormal behavior false alarm rate Ycwb, and the calculation formula is as follows:
[0024]
[0025] In the formula, Ycwb represents the false alarm rate of abnormal behavior, Fptt represents the false positive examples, that is, the number of abnormal behaviors that are mistakenly detected, and Tntt represents the true negative examples, that is, the number of abnormal behaviors that are correctly not detected.
[0026] Preferably, the malicious code protection module further analyzes the data transmitted by the security monitoring module and calculates the malicious risk level Eyfx, and the calculation formula is as follows:
[0027] Eyfx=Eycd*Eygl*Eyyx
[0028] In the formula, Eyfx represents the malicious risk level, Eycd represents the severity of the malicious behavior, which is quantified by defining evaluation indicators, Eygl represents the probability of malicious behavior, which is obtained by statistical analysis methods, and Eyyx represents the actual impact of malicious behavior on the system after it occurs, with a value between 1 and 10.
[0029] Preferably, the network security protection module calculates the network traffic peak value Wlfz according to the malicious risk level, and the calculation formula is as follows:
[0030] Wlfz=Max(Liul1,Liul2,Liul3,...,Liuln)
[0031] In the formula, Wlfz represents the peak value of network traffic, Liul1, Liul2, Liul3, ..., Liuln represent the network traffic data measured at different time points, and Max represents the maximum value of these traffic data.
[0032] Preferably, the network security protection module calculates the firewall rule matching degree Fhpp according to the malicious risk level, and the calculation formula is as follows:
[0033]
[0034] In the formula, Fhpp represents the firewall rule matching degree, Ppgz represents the weight of the i-th firewall rule, and Liu i Represents the network traffic data in the i-th time period.
[0035] Preferably, the security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module, and the calculation formula is as follows:
[0036] Apzs=(Ldpf*Gjdx)+(Sjzc*Akqd)
[0037] In the formula, Apzs represents the security risk assessment index, Ldpf represents the vulnerability severity score, Gjdx represents the attack surface size, Sjzc represents the data asset value, and Akqd represents the security control strength. The above values are automatically obtained by the system.
[0038] Preferably, a cloud computing-based information security protection method comprises the following steps:
[0039] S1, collect user authentication information ST, access request log FR and user authority information YQ through the access control module, calculate the user authentication accuracy Yhzq based on the above data, and pass the authorized user request to the data encryption module;
[0040] S2, the data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain the encrypted user data Jmsj;
[0041] S3, after encrypting the user data, the security monitoring module monitors the security status of the system, calculates the frequency of security events Fspl and the abnormal behavior false alarm rate Ycwb, and transmits the calculated values and detection data to the malicious code protection module;
[0042] S4. The malicious code protection module further analyzes the data transmitted by the security monitoring module, calculates the malicious risk level Eyfx, and transmits the value to the network security protection module;
[0043] S5, the network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module;
[0044] S6. The security policy formulation module calculates the security risk assessment index Apzs based on the data transmitted by the network security module, and formulates a cloud computing information security protection strategy based on the security risk assessment index.
[0045] Compared with the prior art, the present invention provides an information security protection method and system based on cloud computing, which has the following beneficial effects:
[0046] The present invention collects user identity authentication information ST, access request log FR and user authority information YQ through an access control module, calculates the user identity authentication accuracy Yhzq according to the above data, and the data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain encrypted user data Jmsj. After the user data is encrypted, the security monitoring module monitors the security status of the system, calculates the frequency of occurrence of security events Fspl and the abnormal behavior false alarm rate Ycwb, and the malicious code protection module further analyzes the data transmitted by the security monitoring module to calculate the malicious risk level Eyfx. The network security protection module calculates the network traffic peak Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level. The security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module, and formulates a cloud computing information security protection strategy according to the security risk assessment index. Through a symmetric encryption data algorithm and an information security protection strategy with a high protection level, it is ensured that user data is not easily attacked, thereby improving the information security of user private data. BRIEF DESCRIPTION OF THE DRAWINGS
[0047] Figure 1 It is a schematic diagram of the system flow of the present invention;
[0048] Figure 2 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION
[0049] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0050] In view of the risk of data leakage of user private information, a cloud computing-based information security protection system is proposed. Figure 1 The system includes an access control module, a data encryption module, a security monitoring module, a malicious code protection module, a network security protection module and a security policy formulation module, wherein:
[0051] The access control module collects user authentication information ST, access request log FR and user authority information YQ, calculates the user authentication accuracy Yhzq based on the above data, and passes the authorized user request to the data encryption module. The calculation formula for user authentication accuracy is as follows:
[0052]
[0053] Accurate identity authentication can ensure that the user's personal information is properly protected, prevent information leakage and abuse, enhance system security, and prevent unauthorized access and potential security vulnerabilities. In the formula, Yhzq represents the accuracy of user identity authentication, Txp represents true positive examples, that is, the number of samples correctly identified as positive examples, Txn represents true negative examples, that is, the number of samples correctly identified as negative examples, Axp represents false positive examples, that is, the number of samples incorrectly identified as positive examples, and Axn represents false negative examples, that is, the number of samples incorrectly identified as negative examples. The accuracy value is approximately close to 1, indicating that the higher the authentication accuracy, and the closer the accuracy value is to 0, the lower the authentication accuracy. Through accurate identity authentication, fraud can be effectively prevented, the user's true identity can be ensured, and the risk of fraud can be reduced;
[0054] The data encryption module can encrypt data to prevent it from being accessed or stolen by unauthorized persons during transmission and storage, thereby protecting the security of data. Through data encryption, sensitive information can be prevented from being stolen or tampered with during transmission or storage, effectively preventing the risk of information leakage. This module encrypts and protects the authorized user data Yhsj according to the formula to obtain the encrypted user data Jmsj. The encryption formula is as follows:
[0055] Jmsj=AES(Yhsj,Myue)
[0056] Data encryption can protect the privacy of personal and sensitive data and prevent unauthorized visitors or hackers from obtaining and stealing data. In the formula, Jmsj represents encrypted user data, AES represents symmetric encryption algorithm, Yhsj represents user data, and Myue represents key. User data is encrypted by AES encryption algorithm and a key to obtain encrypted user data. The key is a random number generated by the system. Data encryption is an important security measure that can help organizations protect sensitive data, comply with regulations, enhance data security, and build user trust. Data encryption plays an indispensable role in today's increasingly important information security environment;
[0057] After encrypting the user data, the security monitoring module monitors the security status of the system, calculates the frequency of security events Fspl and the abnormal behavior false alarm rate Tcwb, and transmits the calculated values and detection data to the malicious code protection module, where:
[0058] The frequency calculation formula for security incidents is as follows:
[0059]
[0060] By calculating the frequency of security incidents, the risk level of an organization can be assessed. Understanding the frequency of security incidents can help organizations identify potential risks and threats and develop targeted risk management strategies. In the formula, Fspl represents the frequency of security incidents, and W i It is represented as the weight of security event type i. The value is assigned according to the impact of the security event on the system, and the value ranges from 1 to 5. i represents the number of times security event type i occurs during the observation period, T i It indicates the duration of security incident type i during the observation period. Understanding the frequency of security incidents can help organizations allocate security resources more reasonably. According to the frequency of security incidents, organizations can determine which areas need more investment to improve security.
[0061] The calculation formula for abnormal behavior false alarm rate is as follows:
[0062]
[0063] By calculating the abnormal behavior false alarm rate, the accuracy of the system in detecting abnormal behaviors can be evaluated. A lower false alarm rate means that the system can detect and report real abnormal behaviors more accurately, improving the reliability of the system. In the formula, Ycwb represents the abnormal behavior false alarm rate, Fptt represents the false positive examples, that is, the number of abnormal behaviors that are mistakenly detected, and Tntt represents the true negative examples, that is, the number of abnormal behaviors that are not correctly detected. Reducing the abnormal behavior false alarm rate can reduce the frequency of false alarms, avoid interference and waste of time caused by false alarms, and staff do not have to deal with a large number of false alarms. Instead, they can focus more on dealing with real security issues and improve work efficiency.
[0064] The malicious code protection module can help reduce the risk of malicious attacks on the system, protect the security of the system and data, and reduce the possibility of security incidents. The malicious code protection module will regularly update the virus library and malware identification rules to ensure that the system can identify the latest threats in a timely manner. The module will further analyze the data transmitted by the security monitoring module, calculate the malicious risk level Eyfx, and transmit the value to the network security protection module. The malicious risk level calculation formula is as follows:
[0065] Eyfx=Eycd*Eygl*Eyyx
[0066] According to the calculation results of the malicious risk level, it is possible to determine which malicious threats are the most urgent and threatening, so as to give priority to malicious threats with high risk levels and improve the security and risk resistance of the system. In the formula, Eyfx represents the malicious risk level, Eycd represents the severity of malicious behavior, which is quantified by defining evaluation indicators, Eygl represents the probability of malicious behavior, which is obtained by statistical analysis methods, and Eyyx represents the actual impact of malicious behavior on the system after it occurs, with a value between 1 and 10. Malicious threats with high risk levels require more timely warnings and emergency response measures. Calculating the malicious risk level can provide early warning indicators to help organizations detect and respond to potential security threats in a timely manner.
[0067] The network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module, where:
[0068] The network traffic peak calculation formula is as follows:
[0069] Wlfz=Max(Liul1,Liul2,Liul3,...,Liul)
[0070] Monitoring the peak value of network traffic can help to timely discover network failures and problems. Abnormal traffic peaks may mean abnormal traffic, attacks or equipment failures in the network. Timely discovery and resolution of problems can ensure the normal operation of the network. In the formula, Wlfz represents the network traffic peak value, Liul1, Liul2, Liul3, ..., Liuln represent network traffic data measured at different time points, and Max represents the maximum value of these traffic data. Analyzing the network traffic peak value can help discover network performance bottlenecks and bottleneck points, thereby optimizing network performance. According to the characteristics of peak traffic, network equipment configuration can be adjusted and network services can be optimized to improve network performance and stability.
[0071] The calculation formula for the firewall rule matching degree is:
[0072]
[0073] By calculating the rule matching degree, we can ensure that the firewall rules can accurately match the traffic and block malicious traffic and attacks. Improving the rule matching degree can enhance network security and reduce the risk of attacks. In the formula, Fhpp represents the firewall rule matching degree, Ppgz represents the weight of the i-th firewall rule, and Liuli represents the network traffic data in the i-th time period. Understanding the rule matching degree can help determine the priority and execution order of the rules. According to the level of rule matching, the priority of the rules can be adjusted to ensure that the most frequently matched rules are executed first, thereby improving the efficiency of the firewall.
[0074] The security policy formulation module calculates the security risk assessment index Apzs based on the data transmitted by the network security module, and formulates cloud computing information security protection strategies based on the security risk assessment index. The calculation formula of the security risk assessment index is as follows:
[0075] Apzs=(Ldpf*Gjdx)+(Sjzc*Akqd)
[0076] By calculating the security risk assessment index, various security risk factors can be comprehensively considered to evaluate the overall security situation, which helps organizations to fully understand the degree and scope of security risks. In the formula, Apzs represents the security risk assessment index, Ldpf represents the vulnerability severity score, Gjdx represents the attack surface size, Sjzc represents the data asset value, and Akqd represents the security control strength. The above values are automatically obtained by the system. The security risk assessment index can provide a basis for decision-making. Organizations can formulate corresponding security strategies and measures based on the security risks of different risk assessment indexes and make more informed decisions.
[0077] See also Figure 2 , an information security protection method based on cloud computing, comprising the following steps:
[0078] S1, collect user authentication information ST, access request log FR and user authority information YQ through the access control module, calculate the user authentication accuracy Yhzq based on the above data, and pass the authorized user request to the data encryption module;
[0079] S2, the data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain the encrypted user data Jmsj;
[0080] S3, after encrypting the user data, the security monitoring module monitors the security status of the system, calculates the frequency of security events Fspl and the abnormal behavior false alarm rate Ycwb, and transmits the calculated values and detection data to the malicious code protection module;
[0081] S4. The malicious code protection module further analyzes the data transmitted by the security monitoring module, calculates the malicious risk level Eyfx, and transmits the value to the network security protection module;
[0082] S5, the network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module;
[0083] S6. The security policy formulation module calculates the security risk assessment index Apzs based on the data transmitted by the network security module, and formulates a cloud computing information security protection strategy based on the security risk assessment index.
[0084] The above system and method use a symmetric encryption data algorithm and adopt a high-level information security protection strategy to ensure that user data is not easily attacked, so as to achieve the purpose of improving the information security of user private data.
[0085] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.
Claims
1. An information security protection system based on cloud computing, Features: It includes access control module, data encryption module, security monitoring module, malicious code protection module, network security protection module and security policy formulation module; The access control module collects user authentication information ST, access request log FR and user authority information YQ, calculates the user authentication accuracy Yhzq based on the above data, and passes the authorized user request to the data encryption module; The data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain encrypted user data Jmsj; After the user data is encrypted, the security monitoring module monitors the security status of the system, calculates the frequency of security events Fspl and the abnormal behavior false alarm rate Ycwb, and transmits the calculated values and detection data to the malicious code protection module; The malicious code protection module further analyzes the data transmitted by the security monitoring module, calculates the malicious risk level Eyfx, and transmits the value to the network security protection module; The network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module; The security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module, and formulates a cloud computing information security protection strategy according to the security risk assessment index.
2. According to claim 1, an information security protection system based on cloud computing, Features: The access control module calculates the user identity authentication accuracy Yhzq according to the formula, and the calculation formula is as follows: In the formula, Yhzq represents the accuracy of user identity authentication, Txp represents true positive examples, that is, the number of samples correctly identified as positive examples, Txn represents true negative examples, that is, the number of samples correctly identified as negative examples, Axp represents false positive examples, that is, the number of samples mistakenly identified as positive examples, and Axn represents false negative examples, that is, the number of samples mistakenly identified as negative examples. The accuracy value is approximately close to 1, indicating that the higher the authentication accuracy, and the closer the accuracy value is to 0, the lower the authentication accuracy.
3. According to claim 2, an information security protection system based on cloud computing, Features: The data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain the encrypted user data Jmsj. The encryption formula is as follows: Jmsj=AES(Yhsj,Myue) In the formula, Jmsj represents encrypted user data, AES represents the symmetric encryption algorithm, Yhsj represents user data, and Myue represents the key. User data is encrypted using the AES encryption algorithm and a key to obtain encrypted user data. The key is a random number generated by the system.
4. According to claim 3, an information security protection system based on cloud computing, Features: After the user data is encrypted, the security monitoring module monitors the security status of the system and calculates the frequency of occurrence of security events Fspl. The calculation formula is as follows: In the formula, Fspl represents the frequency of security incidents, W i It is represented as the weight of security event type i. The value is assigned according to the impact of the security event on the system, and the value ranges from 1 to 5. i represents the number of times security event type i occurs during the observation period, T i Indicates the duration of security event type i during the observation period.
5. According to claim 4, an information security protection system based on cloud computing, Features: After the user data is encrypted, the security monitoring module monitors the security status of the system and calculates the abnormal behavior false alarm rate Ycwb. The calculation formula is as follows: In the formula, Ycwb represents the false alarm rate of abnormal behavior, Fptt represents the false positive examples, that is, the number of abnormal behaviors that are mistakenly detected, and Tntt represents the true negative examples, that is, the number of abnormal behaviors that are correctly not detected.
6. According to claim 5, an information security protection system based on cloud computing, Features: The malicious code protection module further analyzes the data transmitted by the security monitoring module and calculates the malicious risk level Eyfx. The calculation formula is as follows: Eyfx=Eycd*Eygl*Eyyx In the formula, Eyfx represents the malicious risk level, Eycd represents the severity of the malicious behavior, which is quantified by defining evaluation indicators, Eygl represents the probability of malicious behavior, which is obtained by statistical analysis methods, and Eyyx represents the actual impact of malicious behavior on the system after it occurs, with a value between 1 and 10.
7. The information security protection system based on cloud computing according to claim 6, Features: The network security protection module calculates the network traffic peak value Wlfz according to the malicious risk level, and the calculation formula is as follows: Wlfz=Max(Liul1,Liul2,Liul3,...,Liuln) In the formula, Wlfz represents the peak value of network traffic, Liul1, Liul2, Liul3, ..., Liuln represent the network traffic data measured at different time points, and Max represents the maximum value of these traffic data.
8. According to claim 7, an information security protection system based on cloud computing, Features: The network security protection module calculates the firewall rule matching degree Fhpp according to the malicious risk level, and the calculation formula is as follows: In the formula, Fhpp represents the firewall rule matching degree, Ppgz represents the weight of the i-th firewall rule, and Liu i Represents the network traffic data in the i-th time period.
9. The information security protection method based on cloud computing according to claim 8, Features: The security policy formulation module calculates the security risk assessment index Apzs according to the data transmitted by the network security module. The calculation formula is as follows: Apzs=(Ldpf*Gjdx)+(Sjzx*Akqd) In the formula, Apzs represents the security risk assessment index, Ldpf represents the vulnerability severity score, Gjdx represents the attack surface size, Sjzc represents the data asset value, and Akqd represents the security control strength. The above values are automatically obtained by the system.
10. An information security protection method based on cloud computing, The following steps are involved: S1, collect user authentication information ST, access request log FR and user authority information YQ through the access control module, calculate the user authentication accuracy Yhzq based on the above data, and pass the authorized user request to the data encryption module; S2, the data encryption module encrypts and protects the authorized user data Yhsj according to the formula to obtain the encrypted user data Jmsj; S3, after encrypting the user data, the security monitoring module monitors the security status of the system, calculates the frequency of security events Fspl and the abnormal behavior false alarm rate Ycwb, and transmits the calculated values and detection data to the malicious code protection module; S4. The malicious code protection module further analyzes the data transmitted by the security monitoring module, calculates the malicious risk level Eyfx, and transmits the value to the network security protection module; S5, the network security protection module calculates the network traffic peak value Wlfz and the firewall rule matching degree Fhpp according to the malicious risk level, and transmits the above values to the security policy formulation module; S6. The security policy formulation module calculates the security risk assessment index Apzs based on the data transmitted by the network security module, and formulates a cloud computing information security protection strategy based on the security risk assessment index.