Cloud data security protection method

Abstract

The invention discloses a cloud data security protection method, and belongs to the field of data security. The cloud data security protection method comprises the steps that the leakage protection to cloud data is achieved through data leakage protection; through cloud multi-tenant data security isolation, the leakage prevention of multi-tenant data is achieved, and the problem that a service provider manager views, interpolates and deletes user sensitive data without being authorized is solved; the self-security of a server host is promoted through cloud host security enhancement measures; malicious attack detection, service unified authorization and access control, service request identification and service parameter security check of data services are conducted through a service firewall suite, the security protection to big data is achieved, and the problem of user privacy leakage is solved. Compared with the prior art, according to the cloud data security protection method, all-dimensional security protection to the cloud data can be achieved from four levels, namely, the operation system level, the logical storage level, the data level and the data service level, and the cloud data security protection method has good application and popularization value.

Description

technical field [0001] The present invention relates to the field of data security, specifically a cloud data security protection method, which is a security protection measure mainly developed for cloud data centers such as governments, military forces, Internet services, telecommunication services, and large enterprises, and is mainly used to ensure The data security of the cloud center solves the problem of loss of confidentiality by background administrators in traditional data collection, solves the problem of isolation of data tenants in cloud multi-tenant applications, and solves the problem of data service loss of confidentiality caused by cloud data service interfaces. Background technique [0002] With the development of cloud computing, data is stored in the cloud, and data security has become the most worrying issue for users. It mainly focuses on two aspects: one is to worry about illegal viewing, use or disclosure of cloud data by cloud operators or cloud operat...

AI Technical Summary

Problems solved by technology

[0002] With the development of cloud computing, data is stored in the cloud, and data security has become the most worrying issue for users. It mainly focuses on two aspects: one is to worry about illegal viewing, use or disclosure of cloud data by cloud operators or cloud operation and maintenance personnel; the other is to worry about Other tenants have unauthorized access to their own data, or worry that after data migration or service cancellation under the tenant’s usage mode, the tenant’s data will not be deleted completely, causing key data leakage risks

[0003] In the existing technology, data application access control technology is mainly adopted to realize data access control of cloud users to cloud data and applications; tenant data encryption and distributed tenant security storage technology are adopted to solve the problem of multi-tenant data isolation; administrator application security control is adopted technology to realize the audit of key operations of cloud operation and maintenance managers. Although it can protect cloud data to a certain extent, there will still be a large number of protection loopholes

Images