CN118295765B - Cloud security monitoring method and system based on virtual environment situation assessment - Google Patents
Cloud security monitoring method and system based on virtual environment situation assessment Download PDFInfo
- Publication number
- CN118295765B CN118295765B CN202410283536.2A CN202410283536A CN118295765B CN 118295765 B CN118295765 B CN 118295765B CN 202410283536 A CN202410283536 A CN 202410283536A CN 118295765 B CN118295765 B CN 118295765B
- Authority
- CN
- China
- Prior art keywords
- cloud
- cloud platform
- data
- information
- security
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45587—Isolation or security of virtual machine instances
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
- G06F2009/45595—Network integration; Enabling network access in virtual machine instances
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Alarm Systems (AREA)
Abstract
The invention discloses a cloud security monitoring method and a cloud security monitoring system based on virtual environment situation assessment, which relate to the technical field of computer information security and comprise the steps of acquiring cloud platform data and cloud platform historical data, and according to cloud platform data and cloud platform historical data, based on virtual environment situation assessment, acquiring a cloud security environment basic index, and according to a cloud security index threshold value and a cloud security index, monitoring cloud platform security. According to the cloud platform dangerous situation analysis method, the cloud platform dangerous situation analysis device and the cloud platform dangerous situation analysis system are capable of avoiding the influence on analysis caused by the cloud platform dangerous situation with few times through the cloud platform historical dangerous frequency information and the cloud platform historical dangerous frequency threshold, the cloud platform environment situation of different dangers is evaluated through the cloud security environment basic index, potential loopholes and configuration errors are identified, cloud computing monitoring data are accurately evaluated according to the cloud security index, the possibility of occurrence of security events is effectively reduced, abnormal behaviors and potential threats are timely found, and quick response and potential attack prevention are facilitated.
Description
Technical Field
The invention relates to the technical field of computer information security, in particular to a cloud security monitoring method and system based on virtual environment situation assessment.
Background
Cloud computing refers to unified management and scheduling of resources such as computing, storage, networks, software and the like through a virtualization technology, and provides services such as basic resources, platform capabilities, software applications and the like for users in an internet mode. With the rapid application of cloud computing technology, IT assets and application systems of various levels of governments and various enterprises gradually migrate to cloud platforms. The cloud computing technology has the advantages of time saving, labor saving, money saving and the like, but also brings new safety problems, so that the monitoring of the safety of the cloud platform is important.
At present, the cloud security is monitored, the virtual environment situation of the cloud platform cannot be evaluated according to the parameters of the cloud platform system, the sensitive event in the cloud computing process cannot be accurately evaluated according to the environment situation, the countermeasures of different grades cannot be selected according to the dangerous degree of the cloud platform, and the dangerous event cannot be timely dealt with.
Disclosure of Invention
In order to solve the technical problems, the technical scheme solves the problems that in the prior art, the virtual environment situation of the cloud platform cannot be estimated according to the parameters of the cloud platform system, sensitive events in the cloud computing process cannot be accurately estimated according to the environment situation, countermeasures of different grades cannot be selected according to the dangerous degree of the cloud platform, and dangerous events cannot be timely dealt with.
In order to achieve the above purpose, the invention adopts the following technical scheme:
a cloud security monitoring method based on virtual environment situation assessment comprises the following steps:
Acquiring cloud platform data, wherein the cloud platform data comprises cloud platform network environment data, cloud platform system information and cloud platform security event information;
Acquiring cloud platform historical data, wherein the cloud platform historical data comprises cloud platform historical dangerous category information and cloud platform historical dangerous data corresponding to each cloud platform dangerous category;
according to cloud platform data and cloud platform historical data, based on virtual environment situation assessment, acquiring a cloud security environment basic index;
monitoring cloud computing tasks of a cloud platform to obtain cloud computing monitoring data, wherein the cloud computing monitoring data comprises cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information;
Acquiring cloud security indexes according to cloud computing monitoring data and cloud security environment basic indexes;
acquiring a cloud security index threshold based on cloud platform security monitoring requirements;
and monitoring the cloud platform safety according to the cloud safety index threshold and the cloud safety index.
Preferably, the acquiring the cloud security environment basic index based on the virtual environment situation assessment according to the cloud platform data and the cloud platform historical data specifically includes:
Acquiring cloud platform historical operation data according to cloud platform historical data;
acquiring cloud platform historical dangerous information according to cloud platform historical data, wherein the cloud platform historical dangerous type information and cloud platform historical dangerous data corresponding to each cloud platform dangerous type;
acquiring historical dangerous frequency information of the cloud platform according to the historical dangerous information of the cloud platform;
Acquiring a cloud platform historical dangerous frequency threshold based on data analysis requirements;
Judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard or not according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, and if the historical dangerous frequency information of the cloud platform does not exceed the historical dangerous frequency threshold of the cloud platform, recording the historical dangerous frequency of the cloud platform;
if the cloud platform historical risk frequency information exceeds the cloud platform historical risk frequency threshold, the cloud platform historical risk needs to be alerted to acquire cloud platform alert risk information;
acquiring cloud platform warning dangerous data according to the cloud platform warning dangerous information and cloud platform historical dangerous data;
acquiring historical warning danger difference data of the cloud platform according to the historical running data of the cloud platform and the warning danger data of the cloud platform;
acquiring a cloud platform environment situation assessment model according to the cloud platform historical dangerous frequency information and the cloud platform historical dangerous difference data;
and acquiring a cloud security environment basic index according to the cloud platform data and the cloud platform environment situation assessment model.
Preferably, the acquiring a cloud security environment basic index according to the cloud platform data and the cloud platform environment situation assessment model specifically includes:
Acquiring cloud platform system information according to cloud platform data, wherein the cloud platform system information comprises cloud platform network topology information, cloud platform access control information, cloud platform identity authentication information and cloud platform data encryption information;
according to the cloud platform data, acquiring cloud platform security event information;
Acquiring cloud platform warning danger frequency information according to cloud platform security event information and cloud platform warning danger information, wherein the cloud platform warning danger frequency information comprises event frequencies corresponding to each type of cloud platform warning danger;
Acquiring a cloud security environment basic index based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
the calculation formula of the cloud security environment basic index is as follows:
In the method, in the process of the invention, A cloud security environment basic index for warning danger for the t-th cloud platform,The dangerous frequency is alerted to the t-th cloud platform,As the influence coefficient of the ith data on the cloud security environment basic index of the ith cloud platform warning danger,An evaluation index of the ith index of the cloud platform coefficient,And (3) the standard evaluation index of the ith index of the cloud platform coefficient, and n is the total number of indexes of the cloud platform system.
Preferably, the acquiring the cloud security index according to the cloud computing monitoring data and the cloud security environment basic index specifically includes:
Acquiring cloud platform computing network security information according to cloud computing monitoring data, wherein the cloud platform computing network security information comprises cloud computing call connection information and cloud computing call network service information;
According to cloud computing monitoring data, cloud platform computing data flow information is obtained, wherein the cloud platform computing data flow information comprises cloud platform computing data flow mode information and cloud platform computing data flow amount information;
Acquiring cloud platform calculation standard data according to cloud platform historical data;
acquiring a cloud computing basic security index according to the cloud platform computing network security information, the cloud platform computing data flow information and the cloud platform computing standard data;
acquiring a cloud security index according to the cloud computing basic security index, the cloud computing monitoring data and the cloud security environment basic index;
the calculation formula of the cloud computing basic safety index is as follows:
In the method, in the process of the invention, A base security index is calculated for the cloud,A security assessment index is calculated for the cloud platform,The security impact coefficients for the connection call are calculated for the cloud,The unknown number of connections is invoked for the cloud computing,The total number of call connections is calculated for the cloud,The coefficient of influence of the flow mode of the data on the security is calculated for the jth cloud,The data volume is calculated for the j-th cloud,The standard data volume of the data is calculated for the cloud.
Preferably, the acquiring the cloud security index according to the cloud computing basic security index, the cloud computing monitoring data and the cloud security environment basic index specifically includes:
Acquiring cloud platform warning danger information and cloud platform historical warning danger difference data;
Acquiring cloud platform warning dangerous data characteristic information according to the cloud platform warning dangerous information and cloud platform historical warning dangerous difference data;
Acquiring cloud computing monitoring characteristic data according to cloud platform warning dangerous data characteristic information and cloud computing monitoring data;
acquiring a cloud security index according to the cloud computing basic security index, the cloud computing monitoring characteristic data and the cloud security environment basic index;
the calculation formula of the cloud security index is as follows:
In the method, in the process of the invention, As an index of the security of the cloud,A base security index is calculated for the cloud,The data volume of the monitoring data is calculated for the h cloud,Indicating the influence coefficient of the h cloud computing monitoring data on the warning danger of the t cloud platform,A cloud security environment basic index for warning danger for the t-th cloud platform, z is the total number of cloud computing monitoring data,The cloud platform is alerted to the total number of dangerous classes.
Preferably, the monitoring the cloud platform security according to the cloud security index threshold and the cloud security index specifically includes:
Judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, if not, directly recording the cloud safety, and if so, outputting and displaying cloud platform safety warning information;
Acquiring a cloud security environment basic index according to the cloud security index;
acquiring a cloud security environment basic index threshold according to cloud platform security measure requirements;
Judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, if the cloud safety environment basic index does not exceed the cloud safety environment basic index threshold, not adopting, according to the cloud safety index, carrying out conventional safety protection measures on the cloud platform, and if the cloud safety environment basic index exceeds the cloud safety environment basic index threshold, adopting the emergency protection measures on the cloud platform according to the cloud safety index.
Further, a cloud security monitoring system based on virtual environment situation assessment is provided, which is used for implementing the cloud security monitoring method, and includes:
The main control module is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, acquiring cloud platform alarm dangerous data according to the cloud platform alarm dangerous information and the cloud platform historical dangerous data, acquiring cloud platform historical alarm dangerous difference data according to cloud platform historical operation data and the cloud platform alarm dangerous data, acquiring cloud platform calculation standard data according to the cloud platform historical data, and carrying out conventional safety protection measures on the cloud platform according to the cloud safety index;
The information acquisition module is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information, cloud platform historical dangerous data corresponding to each cloud platform dangerous class, cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information, and transmitting the cloud platform historical dangerous data, the cloud platform computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module;
The evaluation module is used for acquiring historical danger frequency information of the cloud platform according to historical danger information of the cloud platform, acquiring basic indexes of cloud security environment based on a cloud platform environment situation evaluation model according to system information of the cloud platform and historical danger frequency information of the cloud platform, acquiring network security information of cloud platform computing and data flow information of cloud platform computing according to cloud computing monitoring data, acquiring basic security indexes of cloud computing according to the network security information of the cloud platform, the data flow information of the cloud platform computing and data of cloud platform computing standard, acquiring characteristic information of cloud platform warning danger data according to the cloud platform warning danger information and historical danger difference data of the cloud platform, and acquiring basic indexes of cloud security according to the basic security indexes of cloud computing, the monitoring characteristic data of cloud computing and the basic indexes of cloud security environment;
the display module is interacted with the main control module and used for displaying cloud computing monitoring data, cloud safety environment basic indexes, cloud safety indexes and cloud platform safety warning information.
Optionally, the main control module specifically includes:
The control unit is used for acquiring cloud platform warning dangerous data according to cloud platform warning dangerous information and cloud platform historical dangerous data, acquiring cloud platform historical warning dangerous difference data according to cloud platform historical operation data and cloud platform warning dangerous data, acquiring cloud platform calculation standard data according to cloud platform historical data, and performing conventional safety protection measures on the cloud platform according to cloud safety indexes;
the information receiving unit is interacted with the information acquisition module and the evaluation module and is used for receiving data and transmitting the data to the judging unit;
The judging unit is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, and judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold.
Optionally, the information acquisition module specifically includes:
The cloud platform management system comprises a first acquisition unit, a second acquisition unit and a third acquisition unit, wherein the first acquisition unit is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information and cloud platform historical dangerous data corresponding to each cloud platform dangerous class;
The second acquisition unit is used for acquiring cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information and transmitting the cloud computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module.
Optionally, the evaluation module specifically includes:
The environment assessment unit is used for acquiring cloud platform historical dangerous frequency information according to cloud platform historical dangerous information, acquiring cloud security environment basic indexes based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
The cloud computing evaluation unit is used for acquiring cloud platform computing network security information and cloud platform computing data flow information according to cloud computing monitoring data and acquiring cloud computing basic security indexes according to the cloud platform computing network security information, the cloud platform computing data flow information and cloud platform computing standard data;
The cloud security assessment unit is used for acquiring cloud platform warning dangerous data characteristic information according to cloud platform warning dangerous information and cloud platform historical warning dangerous difference data and acquiring cloud security indexes according to cloud computing basic security indexes, cloud computing monitoring characteristic data and cloud security environment basic indexes.
Compared with the prior art, the invention has the beneficial effects that:
According to the cloud security monitoring method and system based on virtual environment situation assessment, the influence of cloud platform dangerous events on analysis is avoided by the cloud platform historical dangerous frequency information and the cloud platform historical dangerous frequency threshold, the cloud platform is assessed on environment situations of different dangers by the cloud security environment basic indexes, potential vulnerabilities and configuration errors are identified, cloud computing monitoring data are accurately assessed according to the cloud security indexes, the occurrence probability of security events is effectively reduced, abnormal behaviors and potential threats are timely found, and quick response and potential attack prevention are facilitated.
Drawings
Fig. 1 is a flow chart of a cloud security monitoring method based on virtual environment situation assessment according to the present invention
FIG. 2 is a flow chart of the basic index acquisition of the cloud security environment according to the present invention;
FIG. 3 is a flow chart of cloud security index acquisition according to the present invention;
Fig. 4 is a structural block diagram of a cloud security monitoring system based on virtual environment situation assessment.
Detailed Description
The following description is presented to enable one of ordinary skill in the art to make and use the invention. The preferred embodiments in the following description are by way of example only and other obvious variations will occur to those skilled in the art.
Referring to fig. 1-3, a cloud security monitoring method based on virtual environment situation assessment in an embodiment of the present invention includes:
S100: acquiring cloud platform data, wherein the cloud platform data comprises cloud platform network environment data, cloud platform system information and cloud platform security event information;
S200: acquiring cloud platform historical data, wherein the cloud platform historical data comprises cloud platform historical dangerous category information and cloud platform historical dangerous data corresponding to each cloud platform dangerous category;
S300: according to cloud platform data and cloud platform historical data, based on virtual environment situation assessment, acquiring a cloud security environment basic index;
Specifically, according to cloud platform data and cloud platform historical data, based on virtual environment situation assessment, a cloud security environment basic index is obtained, and specifically comprises the following steps:
Acquiring cloud platform historical operation data according to cloud platform historical data;
acquiring cloud platform historical dangerous information according to cloud platform historical data, wherein the cloud platform historical dangerous type information and cloud platform historical dangerous data corresponding to each cloud platform dangerous type;
acquiring historical dangerous frequency information of the cloud platform according to the historical dangerous information of the cloud platform;
Acquiring a cloud platform historical dangerous frequency threshold based on data analysis requirements;
Judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard or not according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, and if the historical dangerous frequency information of the cloud platform does not exceed the historical dangerous frequency threshold of the cloud platform, recording the historical dangerous frequency of the cloud platform;
if the cloud platform historical risk frequency information exceeds the cloud platform historical risk frequency threshold, the cloud platform historical risk needs to be alerted to acquire cloud platform alert risk information;
acquiring cloud platform warning dangerous data according to the cloud platform warning dangerous information and cloud platform historical dangerous data;
acquiring historical warning danger difference data of the cloud platform according to the historical running data of the cloud platform and the warning danger data of the cloud platform;
acquiring a cloud platform environment situation assessment model according to the cloud platform historical dangerous frequency information and the cloud platform historical dangerous difference data;
Acquiring cloud platform system information according to cloud platform data, wherein the cloud platform system information comprises cloud platform network topology information, cloud platform access control information, cloud platform identity authentication information and cloud platform data encryption information;
according to the cloud platform data, acquiring cloud platform security event information;
Acquiring cloud platform warning danger frequency information according to cloud platform security event information and cloud platform warning danger information, wherein the cloud platform warning danger frequency information comprises event frequencies corresponding to each type of cloud platform warning danger;
Acquiring a cloud security environment basic index based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
the calculation formula of the cloud security environment basic index is as follows:
In the method, in the process of the invention, A cloud security environment basic index for warning danger for the t-th cloud platform,The dangerous frequency is alerted to the t-th cloud platform,As the influence coefficient of the ith data on the cloud security environment basic index of the ith cloud platform warning danger,An evaluation index of the ith index of the cloud platform coefficient,And (3) the standard evaluation index of the ith index of the cloud platform coefficient, and n is the total number of indexes of the cloud platform system.
In the scheme, whether the historical dangerous frequency of the cloud platform reaches the warning standard is judged through the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold value of the cloud platform, the warning dangerous information of the cloud platform is obtained, the influence of the cloud platform dangerous event on analysis with the minimum number of times is avoided, the cloud platform is evaluated for different dangerous environment situations through the cloud safety environment basic index, according to cloud platform historical danger frequency information and cloud platform historical danger difference data, a cloud platform environment situation assessment model is obtained, according to cloud platform system information and cloud platform warning danger frequency information, a cloud security environment basic index is obtained based on the cloud platform environment situation assessment model, potential vulnerabilities and configuration errors are identified, the danger degree of security events under different virtual environment situations is accurately assessed, and incapability of timely warning of cloud security is avoided.
S400: monitoring cloud computing tasks of a cloud platform to obtain cloud computing monitoring data, wherein the cloud computing monitoring data comprises cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information;
s500: acquiring cloud security indexes according to cloud computing monitoring data and cloud security environment basic indexes;
Specifically, according to cloud computing monitoring data and a cloud security environment basic index, a cloud security index is obtained, which specifically comprises:
Acquiring cloud platform computing network security information according to cloud computing monitoring data, wherein the cloud platform computing network security information comprises cloud computing call connection information and cloud computing call network service information;
According to cloud computing monitoring data, cloud platform computing data flow information is obtained, wherein the cloud platform computing data flow information comprises cloud platform computing data flow mode information and cloud platform computing data flow amount information;
Acquiring cloud platform calculation standard data according to cloud platform historical data;
acquiring a cloud computing basic security index according to the cloud platform computing network security information, the cloud platform computing data flow information and the cloud platform computing standard data;
acquiring a cloud security index according to the cloud computing basic security index, the cloud computing monitoring data and the cloud security environment basic index;
the calculation formula of the cloud computing basic safety index is as follows:
In the method, in the process of the invention, A base security index is calculated for the cloud,A security assessment index is calculated for the cloud platform,The security impact coefficients for the connection call are calculated for the cloud,The unknown number of connections is invoked for the cloud computing,The total number of call connections is calculated for the cloud,The coefficient of influence of the flow mode of the data on the security is calculated for the jth cloud,The data volume is calculated for the j-th cloud,The standard data volume of the data is calculated for the cloud.
Specifically, according to the cloud computing basic security index, the cloud computing monitoring data and the cloud security environment basic index, the cloud security index is obtained, which specifically comprises the following steps:
Acquiring cloud platform warning danger information and cloud platform historical warning danger difference data;
Acquiring cloud platform warning dangerous data characteristic information according to the cloud platform warning dangerous information and cloud platform historical warning dangerous difference data;
Acquiring cloud computing monitoring characteristic data according to cloud platform warning dangerous data characteristic information and cloud computing monitoring data;
acquiring a cloud security index according to the cloud computing basic security index, the cloud computing monitoring characteristic data and the cloud security environment basic index;
the calculation formula of the cloud security index is as follows:
In the method, in the process of the invention, As an index of the security of the cloud,A base security index is calculated for the cloud,The data volume of the monitoring data is calculated for the h cloud,Indicating the influence coefficient of the h cloud computing monitoring data on the warning danger of the t cloud platform,A cloud security environment basic index for warning danger for the t-th cloud platform, z is the total number of cloud computing monitoring data,The cloud platform is alerted to the total number of dangerous classes.
According to the cloud platform security information, the cloud platform computing data flow information and the cloud platform computing standard data, the cloud computing basic security index is obtained, the basic security state of the cloud platform during cloud computing is accurately evaluated, analysis of the whole security condition is facilitated, cloud computing monitoring characteristic data is obtained according to cloud platform warning dangerous data characteristic information and cloud computing monitoring data, the cloud security index is obtained according to the cloud computing basic security index, the cloud computing monitoring characteristic data and the cloud security environment basic index, the cloud computing monitoring data is accurately evaluated, the possibility of occurrence of a security event is effectively reduced, abnormal behaviors and potential threats are timely found, and quick response and potential attack prevention are facilitated.
S600: acquiring a cloud security index threshold based on cloud platform security monitoring requirements;
s700: and monitoring the cloud platform safety according to the cloud safety index threshold and the cloud safety index.
Specifically, judging whether the cloud security index exceeds the cloud security index threshold according to the cloud security index threshold and the cloud security index, if not, directly recording the cloud security, and if so, outputting and displaying cloud platform security warning information;
Acquiring a cloud security environment basic index according to the cloud security index;
acquiring a cloud security environment basic index threshold according to cloud platform security measure requirements;
Judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, if the cloud safety environment basic index does not exceed the cloud safety environment basic index threshold, not adopting, according to the cloud safety index, carrying out conventional safety protection measures on the cloud platform, and if the cloud safety environment basic index exceeds the cloud safety environment basic index threshold, adopting the emergency protection measures on the cloud platform according to the cloud safety index.
In the scheme, whether the cloud safety index exceeds the cloud safety index threshold is judged through the cloud safety index threshold and the cloud safety index, abnormal behaviors and potential threats are found in time, the overall safety of the cloud environment is improved, whether the cloud platform adopts emergency protection measures is judged through the cloud safety environment basic index and the cloud safety environment basic index threshold, and the coping efficiency of cloud safety events is improved.
It will be appreciated that the conventional security protection measures include sensitive user behavior marking, access restriction, bug fixes, and the like, and the emergency protection measures include emergency measures for blocking attack source IP, isolating infected hosts, user login restriction, invoking data locking, and the like, which rapidly cope with security events.
Referring to fig. 4, further, in combination with the cloud security monitoring method based on the virtual environment situation assessment, a cloud security monitoring system based on the virtual environment situation assessment is provided, including:
The main control module is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, acquiring cloud platform alarm dangerous data according to the cloud platform alarm dangerous information and the cloud platform historical dangerous data, acquiring cloud platform historical alarm dangerous difference data according to cloud platform historical operation data and the cloud platform alarm dangerous data, acquiring cloud platform calculation standard data according to the cloud platform historical data, and carrying out conventional safety protection measures on the cloud platform according to the cloud safety index;
The information acquisition module is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information, cloud platform historical dangerous data corresponding to each cloud platform dangerous class, cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information, and transmitting the cloud platform historical dangerous data, the cloud platform computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module;
The evaluation module is used for acquiring historical danger frequency information of the cloud platform according to historical danger information of the cloud platform, acquiring basic indexes of cloud security environment based on a cloud platform environment situation evaluation model according to system information of the cloud platform and historical danger frequency information of the cloud platform, acquiring network security information of cloud platform computing and data flow information of cloud platform computing according to cloud computing monitoring data, acquiring basic security indexes of cloud computing according to the network security information of the cloud platform, the data flow information of the cloud platform computing and data of cloud platform computing standard, acquiring characteristic information of cloud platform warning danger data according to the cloud platform warning danger information and historical danger difference data of the cloud platform, and acquiring basic indexes of cloud security according to the basic security indexes of cloud computing, the monitoring characteristic data of cloud computing and the basic indexes of cloud security environment;
the display module is interacted with the main control module and used for displaying cloud computing monitoring data, cloud safety environment basic indexes, cloud safety indexes and cloud platform safety warning information.
The main control module specifically comprises:
The control unit is used for acquiring cloud platform warning dangerous data according to cloud platform warning dangerous information and cloud platform historical dangerous data, acquiring cloud platform historical warning dangerous difference data according to cloud platform historical operation data and cloud platform warning dangerous data, acquiring cloud platform calculation standard data according to cloud platform historical data, and performing conventional safety protection measures on the cloud platform according to cloud safety indexes;
the information receiving unit is interacted with the information acquisition module and the evaluation module and is used for receiving data and transmitting the data to the judging unit;
The judging unit is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, and judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold.
The information acquisition module specifically comprises:
The cloud platform management system comprises a first acquisition unit, a second acquisition unit and a third acquisition unit, wherein the first acquisition unit is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information and cloud platform historical dangerous data corresponding to each cloud platform dangerous class;
The second acquisition unit is used for acquiring cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information and transmitting the cloud computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module.
The evaluation module specifically comprises:
The environment assessment unit is used for acquiring cloud platform historical dangerous frequency information according to cloud platform historical dangerous information, acquiring cloud security environment basic indexes based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
The cloud computing evaluation unit is used for acquiring cloud platform computing network security information and cloud platform computing data flow information according to cloud computing monitoring data and acquiring cloud computing basic security indexes according to the cloud platform computing network security information, the cloud platform computing data flow information and cloud platform computing standard data;
The cloud security assessment unit is used for acquiring cloud platform warning dangerous data characteristic information according to cloud platform warning dangerous information and cloud platform historical warning dangerous difference data and acquiring cloud security indexes according to cloud computing basic security indexes, cloud computing monitoring characteristic data and cloud security environment basic indexes.
In summary, the invention has the advantages that: judging whether the historical dangerous frequency of the cloud platform reaches an alert standard or not through the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, avoiding the influence of the cloud platform dangerous event on analysis for a few times, evaluating the environment situation of the cloud platform on different dangers through a cloud safety environment basic index, identifying potential vulnerabilities and configuration errors, acquiring the cloud safety index according to the cloud computing basic safety index, cloud computing monitoring characteristic data and the cloud safety environment basic index, accurately evaluating the cloud computing monitoring data through the cloud safety index, effectively reducing the occurrence possibility of the safety event, finding abnormal behaviors and potential threats in time, and being beneficial to quick response and potential attack prevention.
The foregoing has shown and described the basic principles, principal features and advantages of the invention. It will be understood by those skilled in the art that the present invention is not limited to the embodiments described above, and that the above embodiments and descriptions are merely illustrative of the principles of the present invention, and various changes and modifications may be made therein without departing from the spirit and scope of the invention, which is defined by the appended claims. The scope of the invention is defined by the appended claims and equivalents thereof.
Claims (6)
1. The cloud security monitoring method based on the virtual environment situation assessment is characterized by comprising the following steps of:
Acquiring cloud platform data, wherein the cloud platform data comprises cloud platform network environment data, cloud platform system information and cloud platform security event information;
Acquiring cloud platform historical data, wherein the cloud platform historical data comprises cloud platform historical dangerous category information and cloud platform historical dangerous data corresponding to each cloud platform dangerous category;
according to cloud platform data and cloud platform historical data, based on virtual environment situation assessment, acquiring a cloud security environment basic index;
monitoring cloud computing tasks of a cloud platform to obtain cloud computing monitoring data, wherein the cloud computing monitoring data comprises cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information;
Acquiring cloud security indexes according to cloud computing monitoring data and cloud security environment basic indexes;
acquiring a cloud security index threshold based on cloud platform security monitoring requirements;
monitoring the cloud platform safety according to the cloud safety index threshold and the cloud safety index;
The cloud security environment basic index is obtained based on virtual environment situation assessment according to cloud platform data and cloud platform historical data, and specifically comprises the following steps:
Acquiring cloud platform historical operation data according to cloud platform historical data;
acquiring cloud platform historical dangerous information according to cloud platform historical data, wherein the cloud platform historical dangerous type information and cloud platform historical dangerous data corresponding to each cloud platform dangerous type;
acquiring historical dangerous frequency information of the cloud platform according to the historical dangerous information of the cloud platform;
Acquiring a cloud platform historical dangerous frequency threshold based on data analysis requirements;
Judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard or not according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, and if the historical dangerous frequency information of the cloud platform does not exceed the historical dangerous frequency threshold of the cloud platform, recording the historical dangerous frequency of the cloud platform;
if the cloud platform historical risk frequency information exceeds the cloud platform historical risk frequency threshold, the cloud platform historical risk needs to be alerted to acquire cloud platform alert risk information;
acquiring cloud platform warning dangerous data according to the cloud platform warning dangerous information and cloud platform historical dangerous data;
acquiring historical warning danger difference data of the cloud platform according to the historical running data of the cloud platform and the warning danger data of the cloud platform;
acquiring a cloud platform environment situation assessment model according to the cloud platform historical dangerous frequency information and the cloud platform historical dangerous difference data;
Acquiring cloud platform system information according to cloud platform data, wherein the cloud platform system information comprises cloud platform network topology information, cloud platform access control information, cloud platform identity authentication information and cloud platform data encryption information;
according to the cloud platform data, acquiring cloud platform security event information;
Acquiring cloud platform warning danger frequency information according to cloud platform security event information and cloud platform warning danger information, wherein the cloud platform warning danger frequency information comprises event frequencies corresponding to each type of cloud platform warning danger;
Acquiring a cloud security environment basic index based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
the calculation formula of the cloud security environment basic index is as follows:
In the method, in the process of the invention, A cloud security environment basic index for warning danger for the t-th cloud platform,The dangerous frequency is alerted to the t-th cloud platform,As the influence coefficient of the ith data on the cloud security environment basic index of the ith cloud platform warning danger,An evaluation index of the ith index of the cloud platform coefficient,The standard evaluation index of the ith index of the cloud platform coefficient is obtained, and n is the total number of indexes of the cloud platform system;
the cloud security index obtaining method specifically comprises the following steps of:
Acquiring cloud platform computing network security information according to cloud computing monitoring data, wherein the cloud platform computing network security information comprises cloud computing call connection information and cloud computing call network service information;
According to cloud computing monitoring data, cloud platform computing data flow information is obtained, wherein the cloud platform computing data flow information comprises cloud platform computing data flow mode information and cloud platform computing data flow amount information;
Acquiring cloud platform calculation standard data according to cloud platform historical data;
acquiring a cloud computing basic security index according to the cloud platform computing network security information, the cloud platform computing data flow information and the cloud platform computing standard data;
Acquiring cloud platform warning danger information and cloud platform historical warning danger difference data;
Acquiring cloud platform warning dangerous data characteristic information according to the cloud platform warning dangerous information and cloud platform historical warning dangerous difference data;
Acquiring cloud computing monitoring characteristic data according to cloud platform warning dangerous data characteristic information and cloud computing monitoring data;
acquiring a cloud security index according to the cloud computing basic security index, the cloud computing monitoring characteristic data and the cloud security environment basic index;
the calculation formula of the cloud computing basic safety index is as follows:
In the method, in the process of the invention, A base security index is calculated for the cloud,A security assessment index is calculated for the cloud platform,The security impact coefficients for the connection call are calculated for the cloud,The unknown number of connections is invoked for the cloud computing,The total number of call connections is calculated for the cloud,The coefficient of influence of the flow mode of the data on the security is calculated for the jth cloud,The data volume is calculated for the j-th cloud,Calculating standard data quantity of data for the cloud;
the calculation formula of the cloud security index is as follows:
In the method, in the process of the invention, As an index of the security of the cloud,A base security index is calculated for the cloud,The data volume of the monitoring data is calculated for the h cloud,Indicating the influence coefficient of the h cloud computing monitoring data on the warning danger of the t cloud platform,A cloud security environment basic index for warning danger for the t-th cloud platform, z is the total number of cloud computing monitoring data,The cloud platform is alerted to the total number of dangerous classes.
2. The cloud security monitoring method based on the virtual environment situation assessment according to claim 1, wherein the monitoring of cloud platform security according to the cloud security index threshold and the cloud security index specifically comprises:
Judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, if not, directly recording the cloud safety, and if so, outputting and displaying cloud platform safety warning information;
Acquiring a cloud security environment basic index according to the cloud security index;
acquiring a cloud security environment basic index threshold according to cloud platform security measure requirements;
Judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, if the cloud safety environment basic index does not exceed the cloud safety environment basic index threshold, not adopting, according to the cloud safety index, carrying out conventional safety protection measures on the cloud platform, and if the cloud safety environment basic index exceeds the cloud safety environment basic index threshold, adopting the emergency protection measures on the cloud platform according to the cloud safety index.
3. A cloud security monitoring system based on virtual environment situation assessment, for implementing the cloud security monitoring method according to any one of claims 1-2, comprising:
The main control module is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold, acquiring cloud platform alarm dangerous data according to the cloud platform alarm dangerous information and the cloud platform historical dangerous data, acquiring cloud platform historical alarm dangerous difference data according to cloud platform historical operation data and the cloud platform alarm dangerous data, acquiring cloud platform calculation standard data according to the cloud platform historical data, and carrying out conventional safety protection measures on the cloud platform according to the cloud safety index;
The information acquisition module is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information, cloud platform historical dangerous data corresponding to each cloud platform dangerous class, cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information, and transmitting the cloud platform historical dangerous data, the cloud platform computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module;
The evaluation module is used for acquiring historical danger frequency information of the cloud platform according to historical danger information of the cloud platform, acquiring basic indexes of cloud security environment based on a cloud platform environment situation evaluation model according to system information of the cloud platform and historical danger frequency information of the cloud platform, acquiring network security information of cloud platform computing and data flow information of cloud platform computing according to cloud computing monitoring data, acquiring basic security indexes of cloud computing according to the network security information of the cloud platform, the data flow information of the cloud platform computing and data of cloud platform computing standard, acquiring characteristic information of cloud platform warning danger data according to the cloud platform warning danger information and historical danger difference data of the cloud platform, and acquiring basic indexes of cloud security according to the basic security indexes of cloud computing, the monitoring characteristic data of cloud computing and the basic indexes of cloud security environment;
the display module is interacted with the main control module and used for displaying cloud computing monitoring data, cloud safety environment basic indexes, cloud safety indexes and cloud platform safety warning information.
4. The cloud security monitoring system based on virtual environment situation assessment according to claim 3, wherein the main control module specifically comprises:
The control unit is used for acquiring cloud platform warning dangerous data according to cloud platform warning dangerous information and cloud platform historical dangerous data, acquiring cloud platform historical warning dangerous difference data according to cloud platform historical operation data and cloud platform warning dangerous data, acquiring cloud platform calculation standard data according to cloud platform historical data, and performing conventional safety protection measures on the cloud platform according to cloud safety indexes;
the information receiving unit is interacted with the information acquisition module and the evaluation module and is used for receiving data and transmitting the data to the judging unit;
The judging unit is used for judging whether the historical dangerous frequency of the cloud platform reaches an alarm standard according to the historical dangerous frequency information of the cloud platform and the historical dangerous frequency threshold of the cloud platform, judging whether the cloud safety index exceeds the cloud safety index threshold according to the cloud safety index threshold and the cloud safety index, and judging whether the cloud platform adopts emergency protection measures according to the cloud safety environment basic index and the cloud safety environment basic index threshold.
5. The cloud security monitoring system based on virtual environment situation assessment according to claim 3, wherein the information acquisition module specifically comprises:
The cloud platform management system comprises a first acquisition unit, a second acquisition unit and a third acquisition unit, wherein the first acquisition unit is used for acquiring cloud platform data, cloud platform network environment data, cloud platform system information, cloud platform security event information, cloud platform historical data, cloud platform historical dangerous class information and cloud platform historical dangerous data corresponding to each cloud platform dangerous class;
The second acquisition unit is used for acquiring cloud computing monitoring data, cloud platform computing flow data, cloud platform computing service configuration information and cloud platform computing event log information and transmitting the cloud computing monitoring data, the cloud platform computing flow data, the cloud platform computing service configuration information and the cloud platform computing event log information to the evaluation module.
6. The cloud security monitoring system based on virtual environment situation assessment according to claim 3, wherein the assessment module specifically comprises:
The environment assessment unit is used for acquiring cloud platform historical dangerous frequency information according to cloud platform historical dangerous information, acquiring cloud security environment basic indexes based on a cloud platform environment situation assessment model according to cloud platform system information and cloud platform warning dangerous frequency information;
The cloud computing evaluation unit is used for acquiring cloud platform computing network security information and cloud platform computing data flow information according to cloud computing monitoring data and acquiring cloud computing basic security indexes according to the cloud platform computing network security information, the cloud platform computing data flow information and cloud platform computing standard data;
The cloud security assessment unit is used for acquiring cloud platform warning dangerous data characteristic information according to cloud platform warning dangerous information and cloud platform historical warning dangerous difference data and acquiring cloud security indexes according to cloud computing basic security indexes, cloud computing monitoring characteristic data and cloud security environment basic indexes.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410283536.2A CN118295765B (en) | 2024-03-13 | 2024-03-13 | Cloud security monitoring method and system based on virtual environment situation assessment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410283536.2A CN118295765B (en) | 2024-03-13 | 2024-03-13 | Cloud security monitoring method and system based on virtual environment situation assessment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN118295765A CN118295765A (en) | 2024-07-05 |
| CN118295765B true CN118295765B (en) | 2024-09-06 |
Family
ID=91676801
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410283536.2A Active CN118295765B (en) | 2024-03-13 | 2024-03-13 | Cloud security monitoring method and system based on virtual environment situation assessment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN118295765B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118972172B (en) * | 2024-10-15 | 2024-12-17 | 中国电子科技集团公司第三十研究所 | Cloud environment network security situation awareness method and system |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109379373A (en) * | 2018-11-23 | 2019-02-22 | 中国电子科技网络信息安全有限公司 | A cloud security assessment system and method |
| CN116488939A (en) * | 2023-06-16 | 2023-07-25 | 江西科技学院 | Computer information security monitoring method, system and storage medium |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CA2968710A1 (en) * | 2016-05-31 | 2017-11-30 | Valarie Ann Findlay | Security threat information gathering and incident reporting systems and methods |
| CN116506200A (en) * | 2023-05-11 | 2023-07-28 | 余杰 | Cloud security service implementation system and method |
| CN117081851B (en) * | 2023-10-10 | 2024-03-19 | 网思科技股份有限公司 | Display method, system and medium of network security situation awareness information |
-
2024
- 2024-03-13 CN CN202410283536.2A patent/CN118295765B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109379373A (en) * | 2018-11-23 | 2019-02-22 | 中国电子科技网络信息安全有限公司 | A cloud security assessment system and method |
| CN116488939A (en) * | 2023-06-16 | 2023-07-25 | 江西科技学院 | Computer information security monitoring method, system and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN118295765A (en) | 2024-07-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20090106843A1 (en) | Security risk evaluation method for effective threat management | |
| JP6863969B2 (en) | Detecting security incidents with unreliable security events | |
| CN100511159C (en) | Method and system for addressing intrusion attacks on a computer system | |
| CN102171657B (en) | Simplified communication of a reputation score for an entity | |
| CN114615016B (en) | Enterprise network security assessment method and device, mobile terminal and storage medium | |
| US8225407B1 (en) | Incident prioritization and adaptive response recommendations | |
| CN113434866B (en) | Unified risk quantitative evaluation method for instrument function safety and information safety strategies | |
| JP2015519652A5 (en) | ||
| JP2023550974A (en) | Image-based malicious code detection method and device and artificial intelligence-based endpoint threat detection and response system using the same | |
| RU2017118317A (en) | SYSTEM AND METHOD FOR AUTOMATIC CALCULATION OF CYBER RISK IN BUSINESS CRITICAL APPLICATIONS | |
| US20100241478A1 (en) | Method of automating security risk assessment and management with a cost-optimized allocation plan | |
| CN118295765B (en) | Cloud security monitoring method and system based on virtual environment situation assessment | |
| CN114938300B (en) | Industrial control system situation awareness method and system based on equipment behavior analysis | |
| KR101180092B1 (en) | Method and system for analyzing security event, and recording medium thereof | |
| CN119011301B (en) | A real-time network security threat early warning analysis method and system | |
| CN117501658A (en) | Possibility assessment of security incident alerts | |
| CN117668788A (en) | Access control method, device, electronic equipment and storage medium | |
| CN117240553A (en) | Risk assessment methods, devices, electronic equipment and computer-readable storage media | |
| CN115277490A (en) | Network target range evaluation method, system, equipment and storage medium | |
| CN119728279A (en) | Network security monitoring system based on big data analysis | |
| CN114037286A (en) | Big data based automatic sensitive data detection method and system for power dispatching | |
| CN118802313A (en) | Network security situation early warning method, device, equipment, storage medium and product | |
| CN115659351B (en) | Information security analysis method, system and equipment based on big data office | |
| KR20090115496A (en) | Real-time detection method and system of personal information leakage attempt through access pattern analysis | |
| Kai et al. | Development of qualification of security status suitable for cloud computing system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |