Design And Implementation Of Cloud Security Product Management Platform

In recent years,with the rapid development of Internet technology and the emergence of cloud computing,the Internet industry has entered a new peak.At the same time,the cloud security problem arises whit it.The cloud security changes the running mode of the original SOC platform and provides a new framework for security protection.By using the mass data storage,distributed computing and virtualization technology in the cloud computing,the server of the security vendor is linked to the clients of users to form a huge antivirus software to complete the collection,detection and process the virus data.But at present,most of the products of the cloud security vendors are aimed at a certain aspect of security,and few of them provide a comprehensive security capability for the customers.Therefore,a management platform is needed to dock a large number of security products to provide a more perfect security mechanism.In this case,this paper designs and implements the cloud security product management platform.The main work of this paper includes the following aspects: this platform is based on B/S architecture,and implements the management of the user's assets,and provides security early-warning,event analysis and disposing services for the administrators.In the process of implementation,the database cluster and Haproxy and other plug-ins are used to solve the problem of large traffic data warehousing;the single sign on between various security products is realized by CAS,and the unified user rights management of each security product.The centralized management of the security event interception log through ELK.We use Dubbo to perform remote method invocation between services.Finally,we use Java and Spring MVC framework to implement platform business functions.Through these technologies,we can access the security products and create a SOC platform to provide a perfect protection mechanism.In the testing process,support for code normalization checking through Coverity,use Test NG framework and Jenkins to automate testing.At present,this platform has been on-line and has good operation.It can provide users with a more comprehensive security mechanism and effectively intercept attacks against users' business,greatly improve the safety factor of customer's assets,and have high popularization value.