Cloud application detection method and cloud application detection apparatus

Abstract

An embodiment of the invention discloses a cloud application detection method. The method comprises the steps of obtaining at least one application example corresponding to a to-be-detected cloud application, wherein the application examples are in one-to-one correspondence to guard agents; extracting a first eigenvalue corresponding to each application example through each guard agent; when the to-be-detected cloud application meets a preset eigenvalue updating condition or not, updating the first eigenvalue to a second eigenvalue; and if the second eigenvalue is inconsistent, determining theto-be-detected cloud application as a target cloud application with security vulnerabilities. The invention furthermore discloses a cloud application detection apparatus. According to the method andthe apparatus, the integrity protection in running can be provided for the cloud application deployed in a platform as a service, so that the security service capability of the platform as the serviceis improved, the market competitiveness is improved, a user is assisted to timely understand a running state of the cloud application, the cloud application and a running environment of the cloud application are prevented from being maliciously tampered or abnormally running, the user experience is improved, and a cloud service function is enhanced.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a cloud application detection method and a cloud application detection device. Background technique [0002] According to the definition of the National Institute of Standards and Technology (English full name: National Institute of Standards and Technology, English abbreviation: NIST), cloud computing is divided into three major service models, namely infrastructure as a service (English full name: infrastructure as a service, English abbreviation: IaaS), software as a service (English full name: software as a service, English abbreviation: SaaS) and platform as a service (English full name: platform as a service, English abbreviation: PaaS). Among them, PaaS provides application developers with development and operating environment support, including a wide range of middleware, and no longer requires developers to maintain infrastructure configuration management work, nor to ...

AI Technical Summary

Problems solved by technology

[0004] However, based on the security protection of cloud application integrity based on IDB, there may be false positives, and the intrusion cannot be successfully identified 100%, only possible intrusions can be found, so IDB needs to be improved

At the same time, due to system software or hardware failure, the integrity of the application will also be destroyed, but it is not caused by abnormal intrusion behavior, so IDB will not deal with it, and it is difficult to ensure the real-time and flexibility of the solution

Images