Design And Implementation Of The Operation System Security Reinforcement System For Inspur Incloud OS

At present,the momentum of the development of cloud computing products is fierce,and many manufacturers have launched their own cloud computing products,but the safety of the products is generally not considered.The mandatory access control technology of the operation system in the host environment can realize the protection of the kernel level of the operation system,and prevent the uploading,executing of the Trojan horse and the destruction of the system files after the penetration of the host,thus forming the last defense line for the host protection.This technology can also be applied to the cloud environment to protect the cloud host and virtual machine operating system,and improve the security of the cloud computing products.In order to apply the mandatory access control technique to Inspur Incloud virtualization operation system,this paper designs and implements the operation system security reinforcement system for Inspur Incloud OS.Through this system,users can make centralized management of the security policy for HostOS and GuestOS of Inspur Incloud OS,and easily carry out the policy configuration and get the security status.So as to improve the safety and competitiveness of Inspur Incloud OS.This system consists of two parts:Web management side and the agent.The agent has been implemented before this topic,and it can be used directly.Therefore,the main work of this topic is the design and implementation of the Web management side,and it includes requirements analysis,architecture design,detailed design,implementation and test.Through the design and implementation of resource management,group management,system management,policy management,log report management,security monitoring and other functional modules,users can achieve the centralized management of the security policy for HostOS and GuestOS of Inspur Incloud OS.Through the design and implementation of the platform interaction module between this system and the Web management software of Inspur Incloud,users can easily check the security status.Besides,the design and implementation of non functional requirements such as performance,security,availability and compatibility under the environment of Inspur Incloud virtualization operation system is completed.This system uses the MVC architecture to form Web management.The front end services use the Spring framework.The back end services are written using java,providing restful interface,storing configuration information with MySQL and storing logs with MongoDB.The agent uses RabbitMQ to communicate with the Web manager to communicate with the policy and upload the logs.The interaction between Web management and Inspur Incloud OS is realized by using single sign on and calling restful interface.This system is collocated with Inspur Incloud virtualization operation system at present,which has been successfully going into services in several projects.This system improves the security of Inspur Incloud virtualization operation system,and also improves the comprehensive competitiveness of the two systems.