Disposal instruction distribution system and method, computer equipment and storage medium

Abstract

The invention relates to the technical field of cloud security, and discloses a disposal instruction distribution system and method, computer equipment and a storage medium, and the system comprises a disposal instruction management module and a disposal instruction distribution engine: the disposal instruction management module registers the disposal capability information of a single-point cloud native security product to a cloud platform; the processing instruction distribution engine receives a processing instruction sent by the platform type cloud native security product; determining a target single-point cloud native security product, and forwarding the disposal instruction to the target single-point cloud native security product; and the disposal instruction management module provides target disposal capability information corresponding to the target single-point type cloud native security product for the platform type cloud native security product. According to the method and the device, the target single-point cloud native security product with the disposal capability is determined through the disposal instruction distribution engine, so that the appropriate disposal capability of the target single-point cloud native security product is provided for the platform type cloud native security product, and the research and development efficiency of the security product is further improved.

Description

Technical Field

[0001] The present invention relates to the field of cloud security technology, and in particular to a disposal instruction distribution system, method, computer equipment and storage medium. Background Art

[0002] The development of platform-based cloud-native security products relies on the various processing capabilities provided by single-point cloud-native security products. For example, the interception function of firewall products is a typical processing capability. From the perspective of the cloud platform, both single-point cloud-native security products and platform-based cloud-native security products are cloud-native security products. The two are parallel and have no superior-subordinate relationship. Therefore, when developing platform-based cloud-native security products, they need to be connected with specific single-point cloud-native security products.

[0003] In related technologies, the launch of single-point cloud native security products is an ongoing process, with new products constantly being launched and logs of existing products constantly being updated. According to the docking method between existing platform-based cloud native security products and specific single-point cloud native security products, a large number of east-west control flows will appear, and it will be impossible to flexibly respond to various scenarios such as the launch, iteration, and offline of security products, making it difficult to provide platform-based cloud native security products with the processing capabilities of target single-point cloud native security products. Summary of the invention

[0004] In view of this, the present invention provides a processing instruction distribution system, method, computer device and storage medium to solve the problem that it is difficult to provide platform-type cloud native security products with suitable processing capabilities for target single-point cloud native security products.

[0005] In a first aspect, the present invention provides a processing instruction distribution system, the system comprising: a processing instruction management module and a processing instruction distribution engine:

[0006] A disposal instruction management module, for responding to a disposal capability registration request of a single-point cloud native security product, and registering disposal capability information of the single-point cloud native security product to the cloud platform;

[0007] A disposal instruction distribution engine is used to receive disposal instructions sent by platform-type cloud native security products; based on the disposal instructions, determine the target single-point cloud native security product, and forward the disposal instructions to the target single-point cloud native security product;

[0008] The disposal instruction management module is also used to provide the platform-type cloud native security product with the target disposal capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product can call the target single-point cloud native security product.

[0009] In the present invention, a disposal instruction distribution system is composed of a disposal instruction distribution engine and a disposal instruction management module. Single-point cloud native security products register disposal capabilities in the disposal instruction management module, and platform-type cloud native security products send disposal instructions. The disposal instruction distribution engine determines the target single-point cloud native security product with disposal capabilities according to the disposal instructions, and the platform-type cloud native security product calls the corresponding target single-point cloud native security product, thereby providing the platform-type cloud native security product with suitable disposal capabilities of the target single-point cloud native security product, adapting to various scenarios such as the launch, iteration, and offline of security products, thereby improving the R&D efficiency of security products.

[0010] In an optional implementation, the processing capability information includes a processing capability category and a processing capability ID;

[0011] The disposal instruction management module is also used to register the disposal capability ID of the single-point cloud native security product to the disposal instruction management module before the disposal capability information of the single-point cloud native security product is registered to the cloud platform, so as to determine the disposal capability category of the single-point cloud native security product.

[0012] In this method, the disposal capability ID of the single-point cloud native security product is registered to the disposal instruction management module through the disposal instruction management module, and the disposal capability category of the single-point cloud native security product is determined, thereby realizing the management of the disposal capability information of the single-point cloud native security product, thereby facilitating the platform-type cloud native security product to query and call the disposal capability of the single-point cloud native security product.

[0013] In an optional embodiment, the disposal instruction distribution engine is also used to verify the current disposal instruction before receiving the disposal instruction sent by the platform-based cloud native security product, to determine whether the current disposal instruction is included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module; when the current disposal instruction is not included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected.

[0014] In this method, the disposal instruction distribution engine verifies the current disposal instruction. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected, thereby ensuring the existence of the single-point cloud native security product corresponding to the disposal instruction, and further improving the security of platform-based cloud native security products calling single-point cloud native security products.

[0015] In an optional embodiment, a disposal instruction distribution engine is used to determine the target single-point cloud native security product corresponding to the current disposal instruction according to the disposal capability ID and disposal capability category corresponding to the current disposal instruction when the current disposal instruction contains the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module; and forward the disposal instruction to the target single-point cloud native security product so that the platform-type cloud native security product calls the interface of the target single-point cloud native security product.

[0016] In this method, the processing instruction distribution engine determines the target single-point cloud native security product corresponding to the current processing instruction based on the processing capability ID and processing capability category corresponding to the current processing instruction, and forwards the processing instruction to the target single-point cloud native security product, so that the platform-type cloud native security product can call the interface of the target single-point cloud native security product, thereby enabling the platform-type cloud native security product to query and call the processing capabilities of the single-point cloud native security product.

[0017] In a second aspect, the present invention provides a method for distributing a processing instruction, which is applied to a processing instruction distribution system as described in any one of the first aspects, wherein the system comprises: a processing instruction management module and a processing instruction distribution engine, and the method comprises:

[0018] Using the disposal instruction management module to respond to the disposal capability registration request of the single-point cloud native security product, the disposal capability information of the single-point cloud native security product is registered with the cloud platform;

[0019] Use the disposal instruction distribution engine to receive disposal instructions sent by platform-based cloud native security products;

[0020] Based on the disposal instruction, determine the target single-point cloud native security product, and forward the disposal instruction to the target single-point cloud native security product;

[0021] The disposal instruction management module is used to provide the platform-type cloud native security product with the target disposal capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product can call the target single-point cloud native security product.

[0022] In the present invention, a disposal instruction distribution system is composed of a disposal instruction distribution engine and a disposal instruction management module. A single-point cloud native security product can pre-register its own disposal capability in the disposal instruction management module. When a platform-type cloud native security product needs to call the disposal capability of the single-point cloud native security product, a disposal instruction is sent. The disposal instruction distribution engine determines the target single-point cloud native security product with disposal capability according to the disposal instruction. The platform-type cloud native security product can call the disposal capability of the target single-point cloud native security product, thereby providing the platform-type cloud native security product with suitable disposal capability of the target single-point cloud native security product, adapting to various scenarios such as the launch, iteration, and offline of security products, and being able to observe and manage the disposal capabilities provided by all cloud native security products from a unified perspective, thereby improving the R&D efficiency of security products.

[0023] In an optional implementation, the processing capability information includes a processing capability category and a processing capability ID. Before the processing capability information of the single-point cloud native security product is transmitted, the method further includes:

[0024] Register the processing capability ID of the single-point cloud native security product to the processing instruction management module to determine the processing capability category of the single-point cloud native security product.

[0025] In this method, the current disposal instruction is verified by the disposal instruction management module. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected. When a single-point cloud native security product corresponding to the disposal instruction exists, a corresponding calling interface is provided for the platform-type cloud native security product, further improving the security and reliability of the platform-type cloud native security product's call to the single-point cloud native security product.

[0026] In an optional implementation, before receiving the disposal instruction sent by the platform-based cloud native security product, the method further includes:

[0027] Verify the current disposal instruction to determine whether the current disposal instruction contains the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module;

[0028] When the current disposal instruction does not include the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module, the current disposal instruction is rejected.

[0029] In this method, the current disposal instruction is verified by the disposal instruction distribution engine. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected, ensuring the existence of the single-point cloud native security product corresponding to the disposal instruction, and further improving the security of platform-based cloud native security products calling single-point cloud native security products.

[0030] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the disposal instruction distribution method of the second aspect or any corresponding embodiment thereof by executing the computer instructions.

[0031] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the disposal instruction distribution method of the second aspect or any corresponding embodiment thereof.

[0032] In a fifth aspect, the present invention provides a computer program product, comprising computer instructions for causing a computer to execute the disposal instruction distribution method of the second aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 4 is a schematic diagram of the structure of a processing instruction distribution system according to an embodiment of the present invention.

[0035] Figure 2 This is a schematic diagram of the architecture of a disposal instruction distribution system for cloud-native security products according to an embodiment of the present invention.

[0036] Figure 3 It is a flowchart of a method for distributing processing instructions according to an embodiment of the present invention.

[0037] Figure 4 It is a schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0039] In related technologies, the launch of single-point cloud native security products is an ongoing process, with new products constantly being launched and logs of existing products constantly being updated. According to the docking method between existing platform-based cloud native security products and specific single-point cloud native security products, a large number of east-west control flows will appear, and it will be impossible to flexibly respond to various scenarios such as the launch, iteration, and offline of security products, making it difficult to provide platform-based cloud native security products with the processing capabilities of target single-point cloud native security products.

[0040] In order to solve the above problems, a disposal instruction distribution system is provided in an embodiment of the present invention. The disposal instruction distribution system in this embodiment is suitable for the use scenario of cloud native security product development. Through the disposal instruction distribution system provided by the present invention, the disposal instruction distribution system is composed of a disposal instruction distribution engine and a disposal instruction management module. The single-point cloud native security product registers the disposal capability in the disposal instruction management module, and the platform-type cloud native security product sends the disposal instruction. Through the disposal instruction distribution engine, the target single-point cloud native security product with disposal capability is determined according to the disposal instruction. The platform-type cloud native security product calls the corresponding target single-point cloud native security product, which realizes providing the platform-type cloud native security product with the disposal capability of the target single-point cloud native security product, adapting to various scenarios such as the launch, iteration, and offline of security products, thereby improving the research and development efficiency of security products.

[0041] According to an embodiment of the present invention, a processing instruction distribution system embodiment is provided. Figure 1 is a schematic diagram of the structure of a processing instruction distribution system according to an embodiment of the present invention. Figure 1As shown, the system includes: a disposal instruction management module 1 and a disposal instruction distribution engine 2: the disposal instruction management module 1 is used to respond to the disposal capability registration request of the single-point cloud native security product, and register the disposal capability information of the single-point cloud native security product to the cloud platform; the disposal instruction distribution engine 2 is used to receive the disposal instructions sent by the platform-type cloud native security product; based on the disposal instructions, the target single-point cloud native security product is determined, and the disposal instructions are forwarded to the target single-point cloud native security product; the disposal instruction management module 1 is also used to provide the platform-type cloud native security product with the target disposal capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product can call the target single-point cloud native security product.

[0042] In an optional embodiment, the processing capability information includes a processing capability category and a processing capability ID; the processing instruction management module 1 is also used to register the processing capability ID of the single-point cloud native security product to the processing instruction management module 1 before the processing capability information of the single-point cloud native security product is registered to the cloud platform, so as to determine the processing capability category of the single-point cloud native security product.

[0043] In this method, the disposal capability ID of the single-point cloud native security product is registered to the disposal instruction management module through the disposal instruction management module, and the disposal capability category of the single-point cloud native security product is determined, thereby realizing the management of the disposal capability information of the single-point cloud native security product, thereby facilitating the platform-type cloud native security product to query and call the disposal capability of the single-point cloud native security product.

[0044] In an optional embodiment, the disposal instruction distribution engine 2 is also used to verify the current disposal instruction before receiving the disposal instruction sent by the platform-type cloud native security product, to determine whether the current disposal instruction is included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module 1; when the current disposal instruction is not included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module 1, the current disposal instruction is rejected.

[0045] In this method, the disposal instruction distribution engine verifies the current disposal instruction. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected, thereby ensuring the existence of the single-point cloud native security product corresponding to the disposal instruction, and further improving the security of platform-based cloud native security products calling single-point cloud native security products.

[0046] In an optional embodiment, the disposal instruction distribution engine 2 is used to determine the target single-point cloud native security product corresponding to the current disposal instruction according to the disposal capability ID and disposal capability category corresponding to the current disposal instruction when the current disposal instruction contains the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module; and forward the disposal instruction to the target single-point cloud native security product so that the platform-type cloud native security product calls the interface of the target single-point cloud native security product.

[0047] In this method, the processing instruction distribution engine determines the target single-point cloud native security product corresponding to the current processing instruction based on the processing capability ID and processing capability category corresponding to the current processing instruction, and forwards the processing instruction to the target single-point cloud native security product, so that the platform-type cloud native security product can call the interface of the target single-point cloud native security product, thereby enabling the platform-type cloud native security product to query and call the processing capabilities of the single-point cloud native security product.

[0048] In one example, Figure 2 is a schematic diagram of the architecture of a processing instruction distribution system for cloud native security products according to an embodiment of the present invention. Figure 2 As shown in the figure, the disposal instruction distribution system for cloud native security products is a set of middleware in the cloud platform, which consists of two parts, the disposal instruction distribution engine 2 and the disposal instruction management module 1: the disposal instruction management module 1 is responsible for managing the registration and use of disposal instructions, and providing statistics and queries on the call data of disposal instructions. Before registering disposal capabilities, single-point cloud native security products need to apply for disposal capability ID and determine disposal capability category in the disposal instruction management module 1 in an offline manner. The disposal instruction distribution engine 2 is responsible for receiving disposal instructions issued by platform-type cloud native security products and routing them to the target single-point cloud native security products. When receiving disposal instructions, the two-tuple (disposal capability category, disposal capability ID) will be verified. Disposal instructions that have not been applied for in the disposal instruction management module will be rejected. After receiving the disposal instruction, the disposal instruction distribution engine 2 forwards the disposal instruction to the target single-point cloud native security product according to the registered disposal capability information.

[0049] The disposal instruction distribution system provided in this embodiment is composed of a disposal instruction distribution engine and a disposal instruction management module. The single-point cloud native security product registers the disposal capability in the disposal instruction management module, and the platform-type cloud native security product sends the disposal instruction. The disposal instruction distribution engine determines the target single-point cloud native security product with the disposal capability according to the disposal instruction, and the platform-type cloud native security product calls the corresponding target single-point cloud native security product, thereby providing the platform-type cloud native security product with the disposal capability of the target single-point cloud native security product, adapting to various scenarios such as the launch, iteration, and offline of the security product, thereby improving the R&D efficiency of the security product.

[0050] According to an embodiment of the present invention, an embodiment of a method for distributing processing instructions is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0051] In this embodiment, a method for distributing a processing instruction is provided, which can be used in the above-mentioned processing instruction distribution system. The system includes: a processing instruction management module and a processing instruction distribution engine. Figure 3 is a flow chart of a method for distributing a processing instruction according to an embodiment of the present invention. Figure 3 As shown, the process includes the following steps:

[0052] Step S301, register the processing capability ID of the single-point cloud native security product to the processing instruction management module to determine the processing capability category of the single-point cloud native security product.

[0053] In the embodiment of the present invention, the processing capability information includes a processing capability category and a processing capability ID.

[0054] In this method, the current disposal instruction is verified by the disposal instruction management module. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected. When a single-point cloud native security product corresponding to the disposal instruction exists, a corresponding calling interface is provided for the platform-type cloud native security product, further improving the security and reliability of the platform-type cloud native security product's call to the single-point cloud native security product.

[0055] Step S302, using the handling instruction management module to respond to the handling capability registration request of the single-point cloud native security product, register the handling capability information of the single-point cloud native security product to the cloud platform.

[0056] Step S303 , verifying the current processing instruction to determine whether the current processing instruction contains the processing capability ID and processing capability category registered in the processing instruction management module.

[0057] Step S304: When the current processing instruction does not include the processing capability ID and processing capability category registered in the processing instruction management module, the current processing instruction is rejected.

[0058] In this method, the current disposal instruction is verified by the disposal instruction distribution engine. When the current disposal instruction does not contain the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected, ensuring the existence of the single-point cloud native security product corresponding to the disposal instruction, and further improving the security of platform-based cloud native security products calling single-point cloud native security products.

[0059] Step S305: Use the processing instruction distribution engine to receive the processing instructions sent by the platform-based cloud native security product.

[0060] Step S306: Based on the processing instruction, determine the target single-point cloud native security product, and forward the processing instruction to the target single-point cloud native security product.

[0061] Step S307, using the handling instruction management module to provide the platform-type cloud native security product with the target handling capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product can call the target single-point cloud native security product.

[0062] In one implementation scenario, take a single-point cloud native security product referred to as A, which provides processing capabilities; a platform-type cloud native security product referred to as B, which needs to call the processing capabilities provided by the single-point cloud native security product A as an example. The processing capability registration and call may include:

[0063] Step 1: Offline, single-point cloud native security product A applies for a processing capability ID of DO_ID_A in the processing instruction management module and determines the processing capability category as "Layer 4 blocking".

[0064] Step 2: Single-point cloud native security product A calls the API interface API_1 of the disposal instruction distribution engine according to the information determined in step 1 to register the disposal capability.

[0065] Step 3: Platform-based cloud native security product B calls the API interface API_2 of the disposal instruction distribution engine to issue a disposal instruction. The parameters of the disposal instruction need to include the tuple (layer 4 blocking, DO_ID_A).

[0066] Step 4: The disposal instruction distribution engine queries the internal database to determine whether the disposal capability matching the binary group (4-layer blocking, DO_ID_A) is registered. If so, call the interface provided when the single-point cloud native security product A was registered; if not, directly return an error message.

[0067] The disposal instruction distribution method provided in this embodiment utilizes a disposal instruction distribution engine and a disposal instruction management module to jointly form a disposal instruction distribution system. Single-point cloud native security products can pre-register their own disposal capabilities in the disposal instruction management module. When a platform-type cloud native security product needs to call the disposal capability of the single-point cloud native security product, it sends a disposal instruction. The disposal instruction distribution engine determines the target single-point cloud native security product with disposal capability according to the disposal instruction. The platform-type cloud native security product can call the disposal capability of the target single-point cloud native security product, thereby providing the platform-type cloud native security product with suitable disposal capabilities of the target single-point cloud native security product, adapting to various scenarios such as the launch, iteration, and offline of security products, and being able to observe and manage the disposal capabilities provided by all cloud native security products from a unified perspective, thereby improving the R&D efficiency of security products.

[0068] The embodiment of the present invention also provides a computer device for executing the above Figure 3 The processing instruction distribution method shown.

[0069] See also Figure 4 , Figure 4 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 4 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 4 A processor 10 is taken as an example.

[0070] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0071] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0072] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0073] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0074] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 4 The example of connecting through bus is taken in the following.

[0075] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device can be a touch screen.

[0076] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0077] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0078] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A processing instruction distribution system, characterized in that: The system includes: a processing instruction management module and a processing instruction distribution engine: The processing instruction management module is used to register the processing capability information of the single-point cloud native security product to the cloud platform in response to the processing capability registration request of the single-point cloud native security product; The processing instruction distribution engine is used to receive the processing instruction sent by the platform-type cloud native security product; based on the processing instruction, determine the target single-point cloud native security product, and forward the processing instruction to the target single-point cloud native security product; The handling instruction management module is also used to provide the platform-type cloud native security product with target handling capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product calls the target single-point cloud native security product.

2. The system according to claim 1, characterized in that The processing capability information includes a processing capability category and a processing capability ID; The handling instruction management module is also used to register the handling capability ID of the single-point cloud native security product to the handling instruction management module before the handling capability information of the single-point cloud native security product is registered to the cloud platform, so as to determine the handling capability category of the single-point cloud native security product.

3. The system according to claim 2, characterized in that The disposal instruction distribution engine is also used to verify the current disposal instruction before receiving the disposal instruction sent by the platform-type cloud native security product, and determine whether the current disposal instruction is included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module; when the current disposal instruction is not included in the disposal capability ID and disposal capability category after registration in the disposal instruction management module, the current disposal instruction is rejected.

4. The system according to claim 3, characterized in that The disposal instruction distribution engine is used to determine the target single-point cloud native security product corresponding to the current disposal instruction according to the disposal capability ID and disposal capability category corresponding to the current disposal instruction when the current disposal instruction contains the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module; forward the disposal instruction to the target single-point cloud native security product, so that the platform-type cloud native security product calls the interface of the target single-point cloud native security product.

5. A method for distributing processing instructions, characterized in that: Applied to the disposal instruction distribution system according to any one of claims 1 to 4, the system comprises: a disposal instruction management module and a disposal instruction distribution engine, the method comprises: Using the handling instruction management module to respond to a handling capability registration request of a single-point cloud native security product, registering the handling capability information of the single-point cloud native security product to the cloud platform; Utilizing the processing instruction distribution engine to receive processing instructions sent by a platform-based cloud native security product; Based on the processing instruction, determine a target single-point cloud native security product, and forward the processing instruction to the target single-point cloud native security product; The processing instruction management module is used to provide the platform-type cloud native security product with the target processing capability information corresponding to the target single-point cloud native security product, so that the platform-type cloud native security product calls the target single-point cloud native security product.

6. The method according to claim 5, characterized in that The processing capability information includes a processing capability category and a processing capability ID. Before the processing capability information of the single-point cloud native security product is transmitted, the method further includes: Register the processing capability ID of the single-point cloud native security product to the processing instruction management module to determine the processing capability category of the single-point cloud native security product.

7. The method according to claim 6, characterized in that Before receiving the disposal instruction sent by the platform-based cloud native security product, the method further includes: Verify the current disposal instruction to determine whether the current disposal instruction contains the disposal capability ID and disposal capability category after applying for registration in the disposal instruction management module; When the current processing instruction does not include the processing capability ID and processing capability category registered in the processing instruction management module, the current processing instruction is rejected.

8. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the disposal instruction distribution method according to any one of claims 5 to 7 by executing the computer instructions.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the disposal instruction distribution method according to any one of claims 5 to 7.

10. A computer program product, characterized in that The method comprises computer instructions for causing a computer to execute the disposal instruction distribution method according to any one of claims 5 to 7.

Images