Method, device and network for realizing cloud computing network attack defense

Abstract

A method, device and network for realizing cloud computing network attack defense, so as to solve the problem of low defense success rate. The method includes: configuring an initialized security baseline for the computing node, the security baseline including at least one configuration parameter; sending a dynamic security detection request to the computing node, wherein the dynamic security detection request includes at least one configuration parameter for the computing node to perform dynamic security detection; receiving the computing node The dynamic security detection result obtained by performing dynamic security detection in the security execution environment sent by the node according to the dynamic security detection request; determine whether the security baseline of the computing node has changed according to the dynamic security detection result; if the security baseline of the computing node has been changed, Then detect whether the change is an active modification by the user; if the change is not an active modification by the user, restore the security baseline of the computing node to the initialized security baseline. After the technical solution is attacked, the harm of the attack is minimized, thereby improving the success rate of defense.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer networks, and more specifically, to a method, device and network for realizing cloud computing network attack defense. Background technique [0002] Cloud computing is an important innovation in the computing model. By effectively integrating various interconnected computing resources and realizing multi-level virtualization and abstraction, the cloud computing network effectively provides large-scale computing resources to users in the form of reliable services. , thus freeing users from complex underlying hardware logic, software stacks and network protocols. Among them, virtualization technology brings a lot of convenience to the sharing and management of computing resources, and has become an important part of "cloud computing". Virtual Machine Monitor (VMM, Virtual Machine Monitor) is the core of virtualization technology. By abstracting the physical resources of the server,...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a method, device and network for realizing cloud computing network attack defense, so as to solve the problem of low defense success rate

Images