Container security system based on cloud computing

Abstract

The invention provides a container security system based on cloud computing, and belongs to the technical field of communication. An access layer security subsystem of the system comprises a network access security module, an API access security module and a WEB access security module. The security service subsystem comprises a host security service module, a network security service module, a data security module and an auditing module, and the resource layer security subsystem comprises a physical resource security module and a virtual resource security module. The system adopts network access security, API access security and WEB access security to realize multi-dimensional access security detection and control. Container deployment is transferred from a physical server to a virtual machine of cloud computing, so that the security problem of poor isolation of the container is solved, the influence range when the risk of the container occurs is reduced, and the security level of thecontainer is improved. Secure isolation of the container is achieved through multi-tenant isolation of cloud computing. Various security mechanisms are adopted, and the security of the container is realized by utilizing multiple tenants of cloud computing.

Description

Technical field [0001] The invention belongs to the field of communication technology, and specifically relates to a container security system based on cloud computing. Background technique [0002] At present, container-based virtualization technology has swept the entire software development community at lightning speed. After the application is containerized, it can be created faster, and is easier to maintain, and at the same time can get higher quality. [0003] At the same time, more and more application containerization is accompanied by the security issues of containerization. Containers, like virtual machines, are virtualization technologies, but compared to virtual machines, containers have more security issues to consider. Companies that use containers must take data privacy and security seriously, and evaluate when and where the containers play a role, as well as the risks. Although various manufacturers provide a variety of security products, there is no mature over...

AI Technical Summary

Problems solved by technology

[0008] Multi-tenant security threats: Containers of tenants with different security requirements may run on the same physical machine, which is difficult for traditional security measures to handle;

[0009] Privileged user problem: The separation of application system and resource ownership leads to the possibility of administrators accessing user data, thereby causing damage to data confidentiality, integrity, and availability

Images