The invention provides an information safety
attack and defense
system structure of a cloud platform. The
system structure comprises a network
target range system, a security defending system, a comprehensive striking environment and a safety trap analysis system; the network
target range system comprises a plurality of
information security hole environments capable of simulating the security holes of an
operating system level, an application level and a
network level; the security defending system comprises a plurality of information safety protection tools which have monitoring, defending and audit capacities; the comprehensive striking system comprises a plurality of
osmosis attacking tools with the comprehensive and multidirectional attacking capacity; the trap analysis system comprises diversified trap environments which can attract and trap hostile
attack behaviors, and provide the analysis capacity on the
attack behaviors to obtain the attacking features. The information safety attack and defense
system structure provided by the invention is applicable to an
information security attack and defense and
verification system of the cloud platform; furthermore, by the combination of a virtualized service-oriented application technology, the problem of
information security risk that the
security system of the cloud platform is difficult to verify can be solved.