云安全综合分析系统的设计与实现.pdfVIP

Computer Engineering and Applications 计算机工程与应用 2014 ，50（19） 89 云安全综合分析系统的设计与实现 1 2 张 伟 ，董群锋 1 2 ZHANG Wei , DONG Qunfeng 1.咸阳师范学院 信息工程学院，陕西 咸阳712000 2.咸阳师范学院 物理与电子信息工程学院，陕西 咸阳 712000 1.School of Information Engineering, Xianyang Normal University, Xianyang, Shaanxi 712000, China 2.School of Physical and Electronic Engineering, Xianyang Normal University, Xianyang, Shaanxi 712000, China ZHANG Wei, DONG Qunfeng. Design and implementation of cloud security comprehensive analysis system. Com- puter Engineering and Applications, 2014, 50 （19）：89-94. Abstract ：In view of the shortcomings of current mainstream cloud security analysis system whose intelligence is not high or processing capacity is not strong, the paper puts forward a parallel processing ability of streamline PF_RING model, the biological sequence matching algorithm is introduced into the cloud intrusion detection model, with the combination of state matching algorithm and vulnerability assessment algorithm, so the Cloud Security Comprehensive Analysis System （CSAS ）is designed and implemented. Experiments show that the system can carry out flow analysis, intrusion detection and vulnerability scanning under huge amounts of data, compared with the similar system, its processing capacity is pro- moted nearly 10 times and the capacity of security protection is improved 65.43%. This system has effectively improved the ability of cloud security analysis system for intrusion detection, and provides effective protection for the security of cloud platform. Key words ：cloud security; cloud security analysis system; Intrusion Detection System （IDS ）; network traffic analysis 摘 要：针对当前主流的云安全分析系统存在智能化不高，处理能力不强等缺点，提出了具有并行处理能力的流水 化PF_RING 的模型，将生物序列匹配算法引入到云入侵检测模型中，并将其与多状态匹配算法、脆弱性评估算法相 结合，设计并实现了云安全综合分析系统（Cloud Security Comprehensive Analysis System ，CSAS ）。实验表