Information safety attack and defense system structure of cloud platform

Abstract

The invention provides an information safety attack and defense system structure of a cloud platform. The system structure comprises a network target range system, a security defending system, a comprehensive striking environment and a safety trap analysis system; the network target range system comprises a plurality of information security hole environments capable of simulating the security holes of an operating system level, an application level and a network level; the security defending system comprises a plurality of information safety protection tools which have monitoring, defending and audit capacities; the comprehensive striking system comprises a plurality of osmosis attacking tools with the comprehensive and multidirectional attacking capacity; the trap analysis system comprises diversified trap environments which can attract and trap hostile attack behaviors, and provide the analysis capacity on the attack behaviors to obtain the attacking features. The information safety attack and defense system structure provided by the invention is applicable to an information security attack and defense and verification system of the cloud platform; furthermore, by the combination of a virtualized service-oriented application technology, the problem of information security risk that the security system of the cloud platform is difficult to verify can be solved.

Description

technical field [0001] The present invention relates to the field of information security, and more specifically, relates to an information security attack and defense architecture of a cloud platform. Background technique [0002] The service-based cloud computing platform is an important form of information infrastructure in the Internet age. It is the latest form of high-performance and distributed computing development. It provides high-performance, low-cost computing and data services with a new business model to support various information applications. As a new form of informatization based on virtualization, characterized by services, and based on on-demand use as a business model. After the concept of cloud computing was born, it quickly attracted the attention of the government, industry and academia, and the promotion and popularization of its application has become irresistible. Major enterprises are conducting research and development of cloud computing produ...

AI Technical Summary

Problems solved by technology

However, the existing technology, on the one hand, has different focuses and costs on the one hand, and the focus of network attack and defense technology is also different. It often focuses on solving a certain problem, and lacks a complete network attack and defense system. With the application and development of virtualization technology, the existing attack and defense system pays more attention to solving problems in the traditional security field, and it has been difficult to adapt to the needs of new technologies and new security threats.

Images