试论云端安全防御体系的构建

On the Construction of Cloud Security Defense System

云计算服务模式受到广大用户的青睐,越来越多的用户将其应用系统迁移到公有云上。同时,公有云的安全也是用户关注的要点。从技术应用上,通过虚拟专网、安全组、DDoS攻击防御、主机安全防护、应用软件开发安全、渗透测试、WEB应用防火墙、数据存储安全、数据传输安全及数据库安全来构建一个包含网络、主机、应用、数据等多层次的纵深安全防御体系,实现云端网络空间安全态势感知。在开放的安全运维管理平台下实现账号授权管理与访问控制、远程运维安全与日志审计分析以及各类安全产品的协同工作。

Cloud computing service mode has been favored by the majority of users,and more and more users migrate their application systems to the public cloud.At the same time,the security of public cloud is also the key point of users’attention.In terms of technology application,through virtual private network,security group,DDoS attack defense,host security protection system,application software development security,penetration testing,WEB application firewall,data storage security,data transmission security and database security,a multi-level deep security defense system including network,host,application and data is constructed to realize cloud cyberspace security situation awareness.Under the open security operation and maintenance management platform,account authorization management and access control,remote operation and maintenance security and log audit analysis,as well as the collaborative work of various security products are realized.