Cloud platform fine-grained traceability data acquisition method and system based on multilayer data fusion

Abstract

The invention discloses a cloud platform fine-grained traceability data acquisition method and system based on multilayer data fusion, and belongs to the technical field of cloud native. The method comprises the following steps: collecting original function call information from each abstraction layer of a cloud platform by adopting an eBPF hook method; for different abstraction layers in the cloud platform, the eBPF stores function calling information in different key mapping tables according to the characteristics of function calling, and the key mapping tables comprise a TCP mapping table, a container arrangement mapping table, a container mapping table and a file mapping table; performing tracking information optimization on the function call information of different abstraction layers; associating the optimized information of different abstraction layers according to keys and values in different mapping tables to obtain a cross-layer information set; and generating a cross-layer traceability graph according to the cross-layer information set. The method can solve the problems that the mapping relation of entities, functions and containers in the cloud platform is not clear, the affiliation is not clear, and efficient and unified cross-layer attack traceability is difficult to realize.

Images