Cloud platform security situation awareness method

Abstract

The invention discloses a cloud platform security situation awareness method. The cloud platform security situation awareness method comprises the steps of 1) selecting a plurality of basic evaluation points and determining a quantized value of each basic evaluation point; and selecting a plurality of floating evaluation points and determining an initial value of each floating evaluation point; 2) updating the quantized value of each floating evaluation point periodically based on collected cloud platform information, wherein the quantized value of each floating evaluation point in the current period is updated based on the evaluation value of each floating evaluation points in the previous period and a security floating factor in the current period; 3) dividing the cloud platform into a plurality of security layers, fusing the quantized values of the evaluation points belonging to the same security layer to obtain an evaluation value C of the security layer, wherein the evaluation points include the basic evaluation points and the floating evaluation points; and 4) calculating a security evaluation result Q of the cloud platform based on the evaluation value of each security layer of the cloud platform and determining the security situation of the cloud platform. According to the cloud platform security situation awareness method, the security situation of the whole cloud platform can be monitored and evaluated, the operation is simple and convenient, and high security and reliability are achieved.

Description

technical field [0001] The present invention relates to the fields of network security technology, information security technology and data security technology, in particular to a security situation awareness method. Background technique [0002] The "explosive" development of cloud computing has also brought regulatory difficulties to the government and enterprises. Data damage, information leakage, account theft... In recent years, with the development of the cloud storage industry, "cloud security" vulnerabilities are common. Tap "Upload" and "Save", and the large-capacity files that originally need to be stored in the physical tool can be easily saved to the network "cloud" in just a few steps. But what followed was that personal privacy data leaks emerged one after another, and some companies that relied on cloud storage for data storage also faced information security threats, and some companies were even forced to bear the risk of huge compensation or even bankruptcy...

AI Technical Summary

Problems solved by technology

In general, the current government-enterprise cloud faces challenges such as resource integration, industry supervision, security supervision, user supervision, and migration of old applications in overall development. In addition, it also faces new pressures and security issues in cloud operation and maintenance. challenge

Images