Information security protection system based on cloud computing

Abstract

The invention discloses an information security protection system based on cloud computing, and relates to the technical field of information security, an information integration module is utilized to integrate historical security protection efficiency FX of the system, a {FXmax-FXmin} interval is set according to the historical security protection efficiency FX, a monitoring collection module is utilized to monitor and store current information security of the system, and an evaluation information security module is utilized to evaluate information security of the system. An output data integrity check value SWY, an access control security index FA and security protection efficiency FX are calculated in sequence, an early warning and deployment module is used for evaluating, analyzing and adjusting information security protection, an interaction module is used for displaying an evaluation, analyzing and adjusting result of the information security protection, and an execution deployment module is used for executing the system according to the evaluation, analyzing and adjusting result. Through dynamic adjustment and optimization, the data integrity verification capability, the access control security level and the overall security protection capability of the system are remarkably improved, and the security protection capability and the self-repairing capability of the system are enhanced through a formed feedback mechanism.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an information security protection system based on cloud computing. Background Art

[0002] With the rapid development of cloud computing technology, more and more enterprises and individuals store data in the cloud to enjoy the convenience and scalability it brings. However, data security issues in cloud computing environments are becoming increasingly prominent. How to ensure data integrity, prevent unauthorized access, and improve the security protection effectiveness of the system have become urgent issues to be addressed.

[0003] In order to meet these challenges, the existing technology has proposed a variety of information security protection technologies and methods. Among them, constructing an algorithm formula to quantitatively evaluate the security protection capability of the system is an effective method. However, the data integrity verification methods in the existing technology often only focus on the static integrity of the data, but ignore the dynamic changes of the data during the transmission process. In addition, some methods lack the introduction of time factors, which makes the verification results not sensitive and accurate enough, and the traditional access control mechanism is powerless when dealing with complex and changeable attack methods. Although some systems have adopted key and permission request strategies, the key distribution is not uniform enough, and the discrete degree of permission request results is high, which affects the security of the system. In addition, the security protection effectiveness evaluation methods in the existing technology often only focus on a single security indicator, but ignore the overall security protection capability of the system. Summary of the invention

[0004] The purpose of the present invention is to provide an information security protection system based on cloud computing, which solves the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution, and the specific implementation steps are as follows:

[0006] Step I: Use the information integration module to integrate the system's historical security protection performance FX and set {FX accordingly max -FX min}Interval;

[0007] Step II: Use the monitoring and collection module to monitor and store the current information security of the system;

[0008] Step III: Using the information security assessment module, calculate the output data integrity check value SWY, the access control security index FA, and the security protection effectiveness FX in sequence;

[0009] The information security assessment module includes a unit for measuring data integrity and the presence of tampering, a unit for measuring the security level of the cloud computing system access control mechanism, and a unit for comprehensively assessing the security protection capability of the cloud computing system.

[0010] Step IIII: Based on the security protection performance FX and {FX max -FX min} interval, and use the early warning and deployment modules to conduct assessment, analysis and adjustment of information security protection;

[0011] Step IIIII: Use the interactive module to display the evaluation, analysis and adjustment results of information security protection, and use the execution and deployment module to implement the system accordingly;

[0012] The equipment used by the information integration module includes a server;

[0013] The equipment used by the monitoring and collection module includes monitoring equipment;

[0014] The equipment used in the evaluation information security module includes data analysis equipment, monitoring and alarm equipment;

[0015] The equipment used by the interactive module includes visualization equipment;

[0016] The devices used by the execution deployment module include security devices and encryption devices.

[0017] Optionally, based on the historical security protection effectiveness FX of the system, the security protection effectiveness FX that has increased compared to the previous security protection effectiveness FX is summarized to form {FX max -FX min} interval, and {FX max -FX min The interval needs to be updated and replaced regularly according to recent information security;

[0018] Among them, FX max The greatest security protection in history, FX min This is the lowest security protection performance in history.

[0019] Optionally, the calculation formula for measuring the data integrity and the existence of tampering behavior units is as follows:

[0020]

[0021] MY i,avg =(MY1+MY2+MY3+......+MY N ) / N;

[0022] in:

[0023] SWY is the data integrity check value;

[0024] SK iis the value of the i-th data block, SK i Represents the information and data value carried by a single data block stored and transmitted in cloud computing;

[0025] MY i is the i-th key value, used for data encryption and integrity verification;

[0026] T i is the i-th moment, indicating the value of the i-th data block SK i The time of storage and transmission;

[0027] MY i ×T i The product of is used to introduce the time factor, enhance and reflect the sensitivity of data integrity verification;

[0028] MY i,avg is the key average value;

[0029] N is the total number of data blocks;

[0030] MY1 is the first key value, MY2 is the second key value, MY3 is the third key value, MY N is the Nth key value, and is recorded as the i-th key value MY i .

[0031] Optionally, the calculation formula for measuring the security level unit of the cloud computing system access control mechanism is as follows:

[0032] FA=SWY×QL-(MY i,max -MY i,min )+QCB;

[0033] QL=QCS / QZS;

[0034] QCB=(QC1+QC2+QC3+......+QC QCS ) / QCS;

[0035] in:

[0036] FA is the access control security index;

[0037] QL is the permission request rate;

[0038] QCS is the number of permission requests, QZS is the total number of requests;

[0039] MY i,max is the maximum value of the key, MY i,min is the minimum value of the key, MY i,max and MY i,min Used to measure the uniformity of key distribution;

[0040] QCB is the permission request success ratio;

[0041] QC1 is the result of the first permission request, QC2 is the result of the second permission request, and QC3 is the result of the third permission request. QCS Result of the Nth permission request;

[0042] (QC1+QC2+QC3+......+QC QCS ) is recorded as 1 for a successful permission request, and 0 for a failed permission request, and (QC1+QC2+QC3+......+QC QCS ) all single permission request results have values ​​of {0, 1}.

[0043] Optionally, the calculation formula for the comprehensive evaluation of the cloud computing system security protection capability unit is as follows:

[0044]

[0045] in:

[0046] FX is the safety protection performance;

[0047] FW unauth is the number of unauthorized accesses;

[0048] FW total is the total number of visits;

[0049] AS i is the impact value of the ith security event, including the impact of data leakage, attack, and security events without data leakage or attack on system security. Among security events, data leakage or attack is recorded as 1, and security events without data leakage or attack is recorded as 0;

[0050] X is the total number of security incidents, including data leakage, attacks, and the total number of security incidents without data leakage or attacks;

[0051] AS avg is the mean value of safety events;

[0052] e is the natural base;

[0053] FAH is an access control security threshold, and FAH is a known preset value.

[0054] Optionally, the data leakage and attack events include DDoS attacks, SQL injections, malware infections, physical intrusions, and internal staff misoperation according to custom settings. A security event does not cause data leakage and attack, but it still poses a threat or impact on the security of the information system, including system performance degradation and service interruption. According to the definition of a security event, a security event does not cause data leakage and attack, but there is system performance degradation and service interruption, it is still recorded as 1.

[0055] Optionally, based on the security protection performance FX and {FX max -FX min The security protection analysis of} is as follows:

[0056] If the security protection efficiency FX is in {FX max -FX min} range, and close to FX min , it reflects that the security protection performance FX of the system has declined and there are potential risks. When adding keys and adjusting the permission request strategy;

[0057] If the security protection efficiency FX is in {FX max -FX min} range, and close to FX max , it reflects that the system's security protection effectiveness FX is high and the system is in a relatively safe state. The current key and permission request strategy should be maintained and continuously monitored.

[0058] Optionally, the basis for adding a key and adjusting the permission request policy is as follows:

[0059] If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key is MY i,max and the minimum value of the key MY i,min If the difference is large, increase the key to balance the uniformity of the key;

[0060] If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key MY i,max and the minimum value of the key MY i,min If the difference is small, adjust the permission request strategy.

[0061] Optionally, the data leakage and attack events focus on attacking the value SK of the i-th data block i , then the additional protection mechanism is triggered and the value SK of the i-th data block is increased i The key and permission request policy.

[0062] Compared with the prior art, the present invention has the following beneficial effects:

[0063] 1. The present invention constructs a calculation formula for measuring data integrity and the existence of tampering behavior units, and introduces the time factor therein, thereby being able to more comprehensively evaluate the integrity of the data and the possibility of tampering. At the same time, by adjusting the average value item of the key, the problem of abnormal data integrity check value SWY value caused by excessive key size is prevented, thereby improving the accuracy and stability of the verification result.

[0064] Second, the unit for measuring the security level of the cloud computing system access control mechanism proposed in the present invention comprehensively considers the data integrity check value SWY, the permission request rate QL and the uniformity of the key distribution factors, and can more accurately evaluate the access control security level of the system. Among them, when the number of unauthorized accesses FW in the cloud computing system security protection capability unit is comprehensively evaluated unauth Percentage of total visits FW total When the value is 50% or more, by observing the maximum value of the key MY in the key i,max and the minimum value of the key MY i,min The differences between them can be identified and the key and permission request strategies can be adjusted accordingly to further improve the security of the system.

[0065] 3. The unit for comprehensively evaluating the security protection capability of a cloud computing system proposed in the present invention comprehensively considers the suppression rate of unauthorized access, the discrete degree of the impact of security incidents, and the adjustment item factors based on the data integrity check value SWY and the access control security index FA, and can more comprehensively evaluate the security protection capability of the system. At the same time, by forming a closed-loop security protection system, dynamic adjustment and optimization of system parameters are achieved, including further analysis and taking corresponding measures when the security protection effectiveness FX value is close to the lowest interval, and continuous observation when the security protection effectiveness FX value is close to the high interval to ensure that the system remains efficient, stable and secure. BRIEF DESCRIPTION OF THE DRAWINGS

[0066] Figure 1 A method flow chart of the information security protection system based on cloud computing;

[0067] Figure 2 It is a schematic diagram of the overall structure of the security event in the present invention;

[0068] Figure 3 This is a schematic diagram of the structure of the information security assessment module of the present invention;

[0069] Figure 4 It is a schematic diagram of feedback protection of the safety protection performance FX of the present invention. DETAILED DESCRIPTION

[0070] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0071] This cloud computing-based information security protection system is different from the existing information security protection systems. The existing information security protection systems have limitations in data integrity verification, insufficient access control mechanisms, and one-sided security protection effectiveness evaluation. This algorithm unit significantly improves the system's data integrity verification capabilities, access control security levels, and overall security protection capabilities through dynamic adjustment and optimization. The feedback mechanism formed also enhances the system's security protection capabilities and self-repair capabilities.

[0072] For example, see Figures 1 to 4 ,This implementation provides an information security protection system based on cloud computing. The specific implementation steps are as follows:

[0073] Step I: Use the information integration module to integrate the system's historical security protection performance FX and set {FX accordingly max -FX min}Interval;

[0074] Step II: Use the monitoring and collection module to monitor and store the current information security of the system;

[0075] Step III: Using the information security assessment module, calculate the output data integrity check value SWY, the access control security index FA, and the security protection effectiveness FX in sequence;

[0076] The information security assessment module includes a unit for measuring data integrity and the existence of tampering, a unit for measuring the security level of the cloud computing system access control mechanism, and a unit for comprehensively assessing the security protection capabilities of the cloud computing system.

[0077] Step IIII: Based on the security protection performance FX and {FX max -FX min} interval, and use the early warning and deployment modules to conduct assessment, analysis and adjustment of information security protection;

[0078] Step IIIII: Use the interactive module to display the evaluation, analysis and adjustment results of information security protection, and use the execution and deployment module to implement the system accordingly;

[0079] The equipment used by the information integration module includes servers;

[0080] The equipment used in the monitoring and collection module includes monitoring equipment;

[0081] The equipment used to evaluate the information security module includes data analysis equipment, monitoring and alarm equipment;

[0082] The equipment used in the interactive module includes visualization equipment;

[0083] The devices used to execute the deployment module include security devices and encryption devices.

[0084] In this embodiment, the system cooperates with the three algorithm units and combines the three operation results of SWY, FA and FX to form the core algorithm formula of the cloud computing information security protection system, and provides a strong guarantee for the security and stability of the system. SWY is the data integrity check value. This index can capture small changes in data, so as to timely discover potential data tampering behaviors, thereby improving the accuracy and stability of the check result. In the cloud computing environment, data security and integrity are crucial. FA is the access control security index. This index can reflect the effect of the access control mechanism in preventing unauthorized access, and access control is a key link in ensuring system security. FX For security protection effectiveness, this value can provide a comprehensive system security assessment result and help understand the overall security status of the system. Through the cyclic influence mechanism, FX can form a closed-loop security protection system. Specifically, the calculation results of FX can also affect the calculations fed back to SWY and FA, so that the three algorithms of this system can continuously monitor, evaluate, adjust and optimize the security protection strategy of the system, thereby ensuring that the system can remain efficient, stable and secure in the face of various security threats. The cyclic influence of FX on SWY and FA further enhances the system's security protection capability and self-repair capability, and provides strong theoretical support and practical guidance for the construction and optimization of cloud computing information security protection systems.

[0085] See also Figures 1 to 4 , the calculation formula for measuring data integrity and tampering behavior units is as follows:

[0086]

[0087] MY i,avg =(MY1+MY2+MY3+......+MY N ) / N;

[0088] in:

[0089] SWY is the data integrity check value;

[0090] SK i is the value of the i-th data block, SK iRepresents the information and data value carried by a single data block stored and transmitted in cloud computing;

[0091] MY i is the i-th key value, used for data encryption and integrity verification;

[0092] T i is the i-th moment, indicating the value of the i-th data block SK i The time of storage and transmission;

[0093] MY i ×T i The product of is used to introduce the time factor, enhance and reflect the sensitivity of data integrity verification;

[0094] MY i,avg is the key average value;

[0095] N is the total number of data blocks;

[0096] MY1 is the first key value, MY2 is the second key value, MY3 is the third key value, MY N is the Nth key value, and is recorded as the i-th key value MY i .

[0097] In this embodiment: First, in this algorithm unit, "SQRT(Σ(SK i 2 The calculation part of ") / N)" calculates the square root of the average value of the sum of squares of all data block values, which is used to measure the overall discreteness of the data. The greater the discreteness of the data, the greater the difference between the data, and the greater the risk of data tampering. As one of the core parts of the calculation formula for measuring data integrity and the existence of tampering behavior units, it provides a basic assessment of data integrity. By combining it with the product of the key and the timestamp, it further enhances the sensitivity of data integrity verification;

[0098] “MY i ×T i The calculation part calculates the product of the key and the timestamp, which is used to introduce the time factor, making the data integrity check more sensitive to the data storage and transmission time, which helps to identify the changes in data at different time points, so as to determine whether the data has been tampered with. This calculation part is combined with the discreteness of the data to form the calculation formula of the data integrity check value SWY, which enhances the accuracy and sensitivity of the data integrity check;

[0099] The unit for measuring data integrity and tampering behavior in this algorithm can more comprehensively evaluate the integrity and possibility of data tampering by comprehensively considering the sum of squares of data blocks, the product of key and timestamp, and the average value of key. In particular, the product of key and timestamp, i.e., “MY i ×T i "In the calculation part, the time factor is introduced to make the data integrity check more sensitive and to detect potential data tampering in a timely manner;

[0100] By calculating the data integrity check value SWY, the system can promptly detect data integrity problems and take corresponding security measures, including re-verifying data and restoring backup data, to ensure data accuracy and security;

[0101] The key average value MY in the data integrity check value SWY formula i,avg It helps to adjust the data integrity check value SWY value to prevent the abnormal data integrity check value SWY value caused by the key being too large, which helps the system to allocate and manage keys more reasonably and improve the security and efficiency of the keys.

[0102] See also Figures 1 to 4 ,The calculation formula for measuring the security level unit of the cloud computing system access control mechanism is as follows:

[0103] FA=SWY×QL-(MY i,max -MY i,min )+QCB;

[0104] QL=QCS / QZS;

[0105] QCB=(QC1+QC2+QC3+......+QC QCS ) / QCS;

[0106] in:

[0107] FA is the access control security index;

[0108] QL is the permission request rate;

[0109] QCS is the number of permission requests, QZS is the total number of requests;

[0110] MY i,max is the maximum value of the key, MY i,min is the minimum value of the key, MY i,max and MY i,min Used to measure the uniformity of key distribution;

[0111] QCB is the permission request success ratio;

[0112] QC1 is the result of the first permission request, QC2 is the result of the second permission request, and QC3 is the result of the third permission request. QCS Result of the Nth permission request;

[0113] (QC1+QC2+QC3+......+QC QCS ) is recorded as 1 for a successful permission request, and 0 for a failed permission request, and (QC1+QC2+QC3+......+QC QCS ) all single permission request results have values ​​of {0, 1}.

[0114] In this embodiment, first, the "SWY×QL" calculation part is to multiply the data integrity check value SWY by the permission request rate QL, which is used to measure the correlation between the data integrity check and the permission request under the access control mechanism, which helps to evaluate the effectiveness of the access control mechanism in protecting data integrity. As an important part of the calculation formula for the access control mechanism security level of the cloud computing system, it reflects the protection ability of the access control mechanism for data integrity, and together with the uniformity of key distribution and the discrete degree of permission request results, it constitutes the calculation formula of the access control security index FA;

[0115] “(MY i,max -MY i,min The calculation part of the key is to calculate the difference between the maximum and minimum values ​​in the key, which is used to measure the uniformity of key distribution. The more uniform the key distribution is, the higher the security of the system is. As a subtraction item in the calculation formula for the security level of the access control mechanism of the cloud computing system, it reflects the impact of the uneven distribution of keys on the access control security index FA. By reducing the value of this part, the system can optimize the key distribution and improve security.

[0116] Among them, the permission request success ratio QCB is one of the additional items in the calculation formula for measuring the security level of the cloud computing system access control mechanism. It reflects the contribution of the discrete degree of permission request results to the access control security index FA. By increasing the value of this part, the system can improve the stability and consistency of the access control mechanism.

[0117] The unit for measuring the security level of the access control mechanism of the cloud computing system in this algorithm can more accurately evaluate the security level of the access control mechanism in the cloud computing system by combining the data integrity check value SWY, the permission request rate QL, the uniformity of the key distribution, and the discrete degree of the permission request results. This helps the system to timely discover loopholes in the access control mechanism and take corresponding repair measures;

[0118] By calculating the access control security index FA, the system can analyze the frequency and results of permission requests, thereby optimizing the permission request strategy. Specifically, when the permission request rate QL is too high and the degree of dispersion of permission request results is large, the system can take stricter permission review measures to reduce security risks;

[0119] The various parameters in the unit for measuring the security level of the access control mechanism of the cloud computing system can be adjusted and optimized according to the actual needs of the system, which enables the system to maintain high security and flexibility when facing application scenarios of different scales and complexities.

[0120] See also Figures 1 to 4 ,The calculation formula for comprehensively evaluating the security protection capability unit of the cloud computing system is as follows:

[0121]

[0122] in:

[0123] FX is the safety protection performance;

[0124] FW unauth is the number of unauthorized accesses;

[0125] FW total is the total number of visits;

[0126] AS i is the impact value of the ith security event, including the impact of data leakage, attack, and security events without data leakage or attack on system security. Among security events, data leakage or attack is recorded as 1, and security events without data leakage or attack is recorded as 0;

[0127] X is the total number of security incidents, including data leakage, attacks, and the total number of security incidents without data leakage or attacks;

[0128] AS avg is the mean value of safety events;

[0129] e is the natural base;

[0130] FAH is an access control security threshold, and FAH is a known preset value;

[0131] Data leakage and attack events include DDoS attacks, SQL injections, malware infections, physical intrusions, and internal staff misoperation according to custom settings. Among them, a security event does not lead to data leakage and attack, but it still poses a threat or impact to the security of the information system, including system performance degradation and service interruption. According to the definition of security events, a security event does not lead to data leakage and attack, but there is system performance degradation and service interruption, then it is still recorded as 1.

[0132] In this embodiment, the algorithm unit first "(FA × (1-FW unauth / FW total The calculation part of )) is to multiply the access control security index FA by the suppression rate of unauthorized access, which is used to measure the effectiveness of the system in preventing unauthorized access. This helps to evaluate the system's defense capabilities against unauthorized access. As an important part of the calculation formula for the comprehensive evaluation of the cloud computing system security protection capability unit, it reflects the system's security protection capabilities in access control, and together with the discrete degree of the impact of security events, the adjustment item of the data integrity check value SWY and other factors, it constitutes the calculation formula of the security protection effectiveness FX;

[0133] “SQRT[(Σ(AS i 2 ) / X)-AS avg 2 The calculation part calculates the square root of the square of the average value of the security incident impact minus the average value of the square of the security incident impact, which is used to measure the discrete degree of the security incident impact, which helps to evaluate the stability and resilience of the system in dealing with different security incidents. As one of the subtraction items in the calculation formula for the comprehensive evaluation of the cloud computing system security protection capability unit, it reflects the negative impact of the discrete degree of the security incident impact on the system security protection effectiveness. By reducing the value of this part, the system can be prompted to improve its stability and resilience in dealing with security incidents.

[0134] "SWY / (1+e -FA-FAH )” calculation part is based on the adjustment item of the data integrity check value SWY and the access control security index FA, where FAH is the access control security threshold. When the access control security index FA is higher than the access control security threshold FAH, the adjustment item will enhance the value of the security protection effectiveness FX, otherwise, it will weaken it. This helps to dynamically adjust the evaluation result of the system security protection effectiveness FX according to the change of the access control security index FA. As one of the additional items of the calculation formula for the comprehensive evaluation of the security protection capability unit of the cloud computing system, it reflects the dynamic adjustment effect of the data integrity check value SWY and the access control security index FA on the system security protection effectiveness. By introducing this adjustment item, the evaluation result of the security protection effectiveness FX can be more in line with the actual situation and system requirements;

[0135] The comprehensive evaluation unit of cloud computing system security protection capability of this algorithm can comprehensively evaluate the security protection capability of cloud computing system by combining the access control security index FA, the suppression rate of unauthorized access, the discrete degree of security incident impact, and the adjustment item based on the data integrity check value SWY and the access control security index FA, which helps the system to understand the security status of the system in a timely manner and take corresponding security protection measures;

[0136] The data integrity check value SWY in the calculation formula of the unit for comprehensively evaluating the security protection capability of the cloud computing system is associated with the unit for measuring data integrity and the presence of tampering behavior, and the access control security index FA is associated with the unit for measuring the security level of the access control mechanism of the cloud computing system, forming a closed-loop security protection system, which enables the system to dynamically adjust security policies according to actual conditions and improve the pertinence and effectiveness of security protection.

[0137] See also Figures 1 to 4 , based on the security protection performance FX and {FX max -FX min The security protection analysis of} is as follows:

[0138] If the security protection efficiency FX is in {FX max -FX min} range, and close to FX min , it reflects that the security protection performance FX of the system has declined and there are potential risks. When adding keys and adjusting the permission request strategy;

[0139] If the security protection efficiency FX is in {FX max -FX min} range, and close to FX max , it reflects that the security protection effectiveness FX of the system is high and the system is in a relatively safe state. When the current key and permission request strategy are maintained and continuously monitored;

[0140] The basis for adding keys and adjusting permission request policies is as follows:

[0141] If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key is MY i,max and the minimum value of the key MY i,min If the difference is large, increase the key to balance the uniformity of the key;

[0142] If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key MY i,max and the minimum value of the key MY i,min If the difference is small, adjust the permission request strategy;

[0143] Data leakage and attack events focus on attacking the value SK of the i-th data block i , then the additional protection mechanism is triggered and the value SK of the i-th data block is increased i The key and permission request policy.

[0144] In this embodiment, through the cyclical influence of the security protection efficiency FX on the data integrity check value SWY, the system can dynamically adjust the data integrity check strategy and parameters according to the actual situation. Specifically, when the system detects a data integrity problem, it can increase the complexity and diversity of the key and optimize the i-th moment T i The use of the method can improve the accuracy and sensitivity of data integrity verification. When the security protection effectiveness FX value changes, the system can timely discover and solve potential security problems by analyzing the components and change trends of the security protection effectiveness FX value. Specifically, when the security protection effectiveness FX value decreases, the system can analyze whether it is the number of unauthorized access FW unauth Increase, increase in the impact of security incidents or other factors, and take corresponding repair measures to restore the system's security protection capabilities;

[0145] Through the cyclical influence of security protection effectiveness FX on data integrity check value SWY, the system can form a closed loop of continuous improvement and optimization. In this closed loop, the system can continuously collect and analyze security data, evaluate security protection effects, discover potential problems and take corresponding measures to repair and optimize them. This enables the system to continuously adapt to new security threats and challenges and maintain a high level of security protection.

[0146] It is worth noting that for “data leakage, attack events focus on attacking the i-th data block value SK i , then the additional protection mechanism is triggered and the value SK of the i-th data block is increased i As for the additional protection mechanism of "adding keys and permission request policies to high-risk data blocks", adding keys and adjusting permission request policies for high-risk data blocks can effectively improve data security and reduce the risk of data leakage. In addition, according to the real-time changes in attack behaviors, security policies can be dynamically adjusted, so that the system can respond to various security threats more flexibly. The implementation of this mechanism is of great significance for ensuring data security and maintaining stable system operation.

[0147] In summary, the unit for measuring data integrity and the presence of tampering behavior, the unit for measuring the security level of cloud computing system access control mechanism, and the unit for comprehensively evaluating the security protection capability of cloud computing system each have significant beneficial effects, and the cyclical influence of the unit for comprehensively evaluating the security protection capability of cloud computing system on the unit for measuring data integrity and the presence of tampering behavior further enhances the security protection capability and self-healing capability of the system. These formulas provide strong theoretical support and practical guidance for the construction and optimization of cloud computing information security protection system.

[0148] For example 2, please refer to Figures 1 to 4Based on the historical security protection effectiveness FX of the system, the security protection effectiveness FX that has increased compared to the previous security protection effectiveness FX is summarized to form {FX max -FX min} interval, and {FX max -FX min The interval needs to be updated and replaced regularly according to recent information security;

[0149] Among them, FX max The greatest security protection in history, FX min This is the lowest security protection performance in history.

[0150] In this embodiment, by dynamically setting the security threshold interval {FX max -FX min}, so that the system can adjust security policies according to actual changes in security protection effectiveness, so as to respond to various security threats more flexibly. This dynamic adjustment mechanism helps to ensure that the system can respond quickly to new attacks and security vulnerabilities, thereby reducing security risks;

[0151] By analyzing historical security protection effectiveness FX values ​​and setting reasonable security threshold ranges, the system can more accurately identify which areas and data blocks require additional security protection, which helps optimize the allocation of security resources and use limited resources on the most critical security protection tasks;

[0152] Dynamic security threshold interval setting can reduce system performance degradation and user operation inconvenience caused by excessive security protection, and by optimizing system performance while ensuring safety, it can improve the user's overall experience and satisfaction.

[0153] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations can be made to the embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. The information security protection system based on cloud computing is characterized by: The specific implementation steps are as follows: Step I: Use the information integration module to integrate the system's historical security protection performance FX and set {FX accordingly max -FX min }Interval; Step II: Use the monitoring and collection module to monitor and store the current information security of the system; Step III: Using the information security assessment module, calculate the output data integrity check value SWY, the access control security index FA, and the security protection effectiveness FX in sequence; The information security assessment module includes a unit for measuring data integrity and the presence of tampering, a unit for measuring the security level of the cloud computing system access control mechanism, and a unit for comprehensively assessing the security protection capabilities of the cloud computing system. Step IIII: Based on the security protection performance FX and {FX max -FX min } interval, and use the early warning and deployment modules to conduct assessment, analysis and adjustment of information security protection; Step IIIII: Use the interactive module to display the evaluation, analysis and adjustment results of information security protection, and use the execution and deployment module to implement the system accordingly.

2. The information security protection system based on cloud computing according to claim 1 is characterized in that: Based on the historical security protection effectiveness FX of the system, the security protection effectiveness FX that has increased compared to the previous security protection effectiveness FX is summarized, thereby forming {FX max -FX min } interval, and {FX max -FX min The interval needs to be updated and replaced regularly according to recent information security; Among them, FX max The greatest security protection in history, FX min This is the lowest security protection performance in history.

3. The information security protection system based on cloud computing according to claim 2, characterized in that: The calculation formula for measuring data integrity and tampering behavior units is as follows: MY i,avg =(MY1+MY2+MY3+......+MY N ) / N; in: SWY is the data integrity check value; SK i is the value of the i-th data block, SK i Represents the information and data value carried by a single data block stored and transmitted in cloud computing; MY i is the i-th key value, used for data encryption and integrity verification; T i is the i-th moment, indicating the value of the i-th data block SK i The time of storage and transmission; MY i ×T i The product of is used to introduce the time factor, enhance and reflect the sensitivity of data integrity verification; MY i,avg is the key average value; N is the total number of data blocks; MY1 is the first key value, MY2 is the second key value, MY3 is the third key value, MY N is the Nth key value, and is recorded as the i-th key value MY i .

4. The information security protection system based on cloud computing according to claim 3 is characterized in that: The calculation formula for measuring the security level unit of the cloud computing system access control mechanism is as follows: FA=SWY×QL-(MY i,max -MY i,min )+QCB; QL=QCS / QZS; QCB=(QC1+QC2+QC3+......+QC QCS ) / QCS; in: FA is the access control security index; QL is the permission request rate; QCS is the number of permission requests, QZS is the total number of requests; MY i,max is the maximum value of the key, MY i,min is the minimum value of the key, MY i,max and MY i,min Used to measure the uniformity of key distribution; QCB is the permission request success ratio; QC1 is the result of the first permission request, QC2 is the result of the second permission request, and QC3 is the result of the third permission request. QCS Result of the Nth permission request; (QC1+QC2+QC3+......+QC QCS ) is recorded as 1 for a successful permission request, and 0 for a failed permission request, and (QC1+QC2+QC3+......+QC QCS ) all single permission request results have values ​​of {0, 1}.

5. The information security protection system based on cloud computing according to claim 4 is characterized in that: The calculation formula for the comprehensive evaluation of the cloud computing system security protection capability unit is as follows: in: FX is the safety protection performance; FW unauth is the number of unauthorized accesses; FW total is the total number of visits; AS i is the impact value of the ith security event, including the impact of data leakage, attack, and security events without data leakage or attack on system security. Among security events, data leakage or attack is recorded as 1, and security events without data leakage or attack is recorded as 0; X is the total number of security incidents, including data leakage, attacks, and the total number of security incidents without data leakage or attacks; AS avg is the mean value of safety events; e is the natural base; FAH is an access control security threshold, and FAH is a known preset value.

6. The information security protection system based on cloud computing according to claim 5, characterized in that: The data leakage and attack events include DDoS attacks, SQL injections, malware infections, physical intrusions, and internal staff misoperation according to custom settings. Among them, a security event does not lead to data leakage and attack, but it still poses a threat or impact to the security of the information system, including system performance degradation and service interruption. According to the definition of security events, a security event does not lead to data leakage and attack, but there is system performance degradation and service interruption, then it is still recorded as 1.

7. The information security protection system based on cloud computing according to claim 5, characterized in that: Based on the security protection performance FX and {FX max -FX min The security protection analysis of} is as follows: If the security protection efficiency FX is in {FX max -FX min } range, and close to FX min , it reflects that the security protection performance FX of the system has declined and there are potential risks. When adding keys and adjusting the permission request strategy; If the security protection efficiency FX is in {FX max -FX min } range, and close to FX max , it reflects that the system's security protection effectiveness FX is high and the system is in a relatively safe state. The current key and permission request strategy should be maintained and continuously monitored.

8. The information security protection system based on cloud computing according to claim 6, characterized in that: The basis for adding keys and adjusting permission request policies is as follows: If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key is MY i,max and the minimum value of the key MY i,min If the difference is large, increase the key to balance the uniformity of the key; If the number of unauthorized accesses FW unauth Percentage of total visits FW total 50% and above, and the maximum value of the key is MY i,max and the minimum value of the key MY i,min If the difference is small, adjust the permission request strategy.

9. The information security protection system based on cloud computing according to claim 7, characterized in that: The data leakage and attack events focus on attacking the value SK of the i-th data block i , then the additional protection mechanism is triggered and the value SK of the i-th data block is increased i The key and permission request policy.

10. The information security protection system based on cloud computing according to claim 1, characterized in that: The equipment used by the information integration module includes a server; The equipment used by the monitoring and collection module includes monitoring equipment; The equipment used in the evaluation information security module includes data analysis equipment, monitoring and alarm equipment; The equipment used by the interaction module includes visualization equipment; The equipment used by the execution deployment module includes security equipment and encryption equipment.

Images