Research On Situation Awareness Of Cryptographic Equipment In Cloud Environment

With the advent of the cloud computing era,China has implemented many cloud-based application systems,such as public cloud service platforms in the public domain,cloud service platforms in the financial sector,cloud service platforms in the government sector,and cloud service platforms in the commercial sector,et al.The rapid development of cloud computing has also brought many cloud security issues.Among them,data security and privacy protection are the primary concerns of cloud security,and cloud cryptography can provide a series of complete and reliable solutions for various cloud security issues.At present,the application of cryptography in cloud computing mainly adopts a cloud cryptographic resource pool solution to achieve unified management and scheduling of cryptographic resources and supply on demand,thereby meeting the needs of cloud cryptographic services.The security status of cloud cryptographic devices will affect the service quality of the entire cloud platform.Therefore,how to solve the security supervision of cryptographic devices in the cloud environment has become an important research direction.This paper focuses on the characteristics of cloud cryptographic devices,studies the characteristics of cloud cryptographic devices security supervision and the current problems in cloud cryptographic devices security supervision,and proposes to apply the situational awareness technology in the field of network security to cloud cryptographic devices security supervision.Real-time grasp the security status of cloud cryptographic devices.The main work of this study are as follows:(1)Aiming at the problem that the original security alarm of the cloud cryptographic devices has redundancy,false positives,and omissions,resulting in the fact that the original security alarm cannot understand the actual attack situation of the cloud cryptographic devices,an alarm causation based on the Markov nature is designed.Correlation analysis technology solution is used to solve the problem of identification of attack activities in the process of cloud cryptographic device security situation awareness.(2)Based on the threat characteristics and warning characteristics of cryptographic equipment in the cloud environment,a technical plan for cloud cryptographic equipment security situation assessment based on fuzzy comprehensive evaluation method is designed.The fuzzy comprehensive evaluation method is used from three dimensions: operation dimension,vulnerability dimension and threat dimension.Evaluate the security status of cloud cryptographic equipment,used to solve the problem of evaluating the security situation in the process of cloud cryptographic equipment security situation awareness.(3)According to the above key technologies of cloud cryptographic devices security situation awareness,a cryptographic device security situation awareness framework under cloud environment is proposed to improve the current cloud cryptographic device security supervision system.Designed and implemented a prototype system of cloud cryptographic devices supervision with security situation awareness.The simulation experiment is designed and carried out,which verifies the scientificity and practicability of the situational awareness technology of cloud cryptographic equipment in this paper.This paper puts forward the research direction of applying network security situation awareness technology to the security supervision of cloud cryptographic equipment,and then designs a solution for the application of situational awareness technology in cloud cryptographic equipment,and finally achieves a macro-level assessment of the security status of cloud cryptographic equipment,which improves The efficiency of cloud cryptographic equipment security supervision guarantee the safe operation on cloud cryptographic devices.