Website security monitoring method based on cloud architecture

Abstract

The invention discloses a website security monitoring method based on a cloud architecture. The event is used as the drive, and the cloud architecture is used as the support, so as to support the centralized monitoring early-alarming of massive websites and the quick response processing of each event; the 24-hour security event automatic monitoring and alarming is carried out on various websites, so as to cooperate with operation and maintenance monitoring personnel to implement manual analysis and event processing on the security events. Through the 24-hour cooperation of the website security monitoring and event operation and maintenance monitoring personnel, the latest real security events in the website can be timely monitored, so a user can timely process various major security events, and reduce the loss and risk caused by various security events.

Description

technical field [0001] The invention relates to the technical field of website security monitoring, in particular to a method for website security monitoring based on cloud architecture. Background technique [0002] At present, the Internet website has become an important means of information dissemination, circulation, exchange and storage. Since the Internet website is open 24 / 7, and the application program that carries the website has loopholes that cannot be completely overcome by itself, this provides an opportunity for hackers to intrude. Opportunities that can be taken advantage of, such as page tampering, website rooting, injection attacks, DDoS attacks, etc., have greatly troubled website providers and caused serious damage to corporate image, information network and even core business. With the continuous improvement of the level of government informatization, the situation of e-government information security is becoming increasingly severe. The government affai...

AI Technical Summary

Problems solved by technology

[0021] (1) Professional scanning tools often cannot solve the Trojan horse problem, and the cost is huge. At the same time, facing the complex security requirements of Web sites, they also have some limitations of their own;

[0022] (2) The previous anti-tampering technology can only detect files, but cannot effectively monitor database content and cross-site data, resulting in many incidents of being hacked, tampered, and linked to horses;

[0023] (3) At present, traditional security devices are not strict enough to protect application security. Many websites are often hacked, tampered with, and have not been found after a long time of hanging horses. During this period, many visitors will become victims. Or news about being hacked, tampered with, or linked to a horse spread everywhere, which caused a very bad reputation loss to the person in charge of the website or the unit;

[0024] (4) With the continuous improvement of informatization level and the continuous growth of various information systems, the old centralized monitoring system is increasingly unable to withstand the monitoring range beyond the limit, resulting in many new information systems that cannot be included in the centralized monitoring protection range Inside

Images