Network audit subsystem applied to cloud audit system

Abstract

The invention discloses a network audit subsystem applied to a cloud audit system. The network audit subsystem comprises a network audit processing engine, a host traffic acquisition proxy and a network traffic acquisition proxy, wherein the network audit processing engine is used for auditing virtual machine traffic and physical machine traffic in a network acquired from cloud data; the host traffic acquisition proxy is used for acquiring the virtual machine traffic and distributing the virtual machine traffic to the network audit processing engine; and the network traffic acquisition proxy is used for acquiring the physical machine traffic and distributing the physical machine traffic to the network audit processing engine. The invention generally aims to acquire network data packets from network equipment, hosts and the like for analyzing and recording according to a certain rule and strategy setting. All acquired network access records are written into a database; the system can perform work such as network security vulnerability analysis and intrusion detection; data can be supplied to an audit data center for analysis, presentation and the like; and the data are to be storedin the database for later checking.

Description

technical field [0001] The invention relates to a cloud application subsystem, in particular to a network audit subsystem applied to a cloud audit system. Background technique [0002] Cloud computing is a new leading information technology, which combines IT technology and the Internet to achieve super computing and high storage capacity. The impetus for the rise of cloud computing is the development of technologies such as high-speed Internet, virtualization technology, cheaper and more powerful chips and hard drives, and data centers. Cloud computing can be regarded as the product of the development and fusion of traditional computer and network technologies such as distributed computing, parallel computing, utility computing, network storage, virtualization, and load balancing. There are many key technologies involved in cloud computing, including: communication, large-scale distributed storage technology, massive data processing technology, resource management and virt...

AI Technical Summary

Problems solved by technology

[0003] The audit workload for the big data system of the power grid is huge, and the audited data is not comprehensive enough. Therefore, the current audit system cannot meet the audit requirements of the big data system of the power grid at all.

Images