Cloud resource pool data security detection method and system

Abstract

The invention discloses a cloud resource pool data security detection method comprising the steps of acquiring established sensitive data; acquiring export data drained from a cloud resource pool; scanning and recognizing the sensitive data in the export data; building a sensitive data life cycle, and hierarchically managing the sensitive data; capturing a host virtual machine of the sensitive data in a cloud resource environment, and monitoring traffic of the virtual machine; and analyzing the sensitive data and abnormal operation behaviors of the host virtual machine of the sensitive data, and giving an alarm. In addition, the invention also provides a cloud resource pool sensitive data security detection system comprising a control module, a collection module, a processing module, a supervising module and an auditing module. By using the method provided by the invention, a full life cycle security control on links such as building, generation, utilization and destroying of various kinds of sensitive data during business data calling and transmission, and business interaction and migration processes under the cloud computing environment is achieved, and thus abnormal and illegal behaviors can be found.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a cloud resource pool data security detection and protection system and a method thereof. Background technique [0002] The main difference between cloud resource pool and traditional platform construction in terms of system composition is that resources are virtualized to form a unified resource pool, which simplifies resource configuration and management, improves hardware utilization, and realizes the flexibility and elasticity of cloud computing. The introduction of the virtual layer makes the security protection system with access control as the core very different from the traditional business platform construction protection system. In addition to traditional host security, network security, etc., it also needs to include special virtualization security in cloud computing. . [0003] In the cloud resource pool, CRM and other business system hosts ...

AI Technical Summary

Problems solved by technology

At present, there is no technical protection and monitoring for the security of medium and sensitive data in the cloud resource pool environment. For the transmission, storage and data protection of sensitive data in the virtual resource pool, a complete construction plan is urgently needed to realize the security of sensitive data. Security Protection and Monitoring

Images