云环境隐私泄露恶意行为应急响应关键技术

The research on emergency response technology of privacy leakage malicious behavior in cloud computing is carried out, which provides development for the cloud computing. The topic concentrates on four technical problems, which are linkage control system of cloud computing core nodes, suspicious of privacy leakage behavior characteristics automatic analysis and detection, rapid positioning and evaluation of privacy leakage behavior, and privacy leakage attack immunological techniques, so as to resolve the proactive defense problem of privacy leakage malicious attack in cloud computing. It firstly summarizes the security gaps in cloud computing mainly from the following security domains, security risks and security threats three aspects. Then it focuses on malicious behavior proactive defense mechanism from the following aspects: probes deployment of cloud computing servers, security architecture based on cloud computing core node reputation certification, unknown malware behavior automatic immune detection based on space relevance features, privacy leakage response and field treatment, virtual machine introspection, malicious attack evaluation based on synthetic entropy method, and the active response technology based on network privacy leakage behavior dendritic cell immune algorithm. Finally, it designs and implements malicious monitoring prototype system of privacy leakage in cloud computing. The topic proposes complete emergency process of key technical issues involved in the privacy leakage behavior emergency response in cloud computing. As a result, it will improve the overall level of the malicious code active defense of our country in cloud computing and bring about good market prospects and economic benefits as well.

课题研究云计算环境隐私泄露恶意行为应急响应技术，对云计算的可持续发展将提供重要保障。针对云计算环境联动监控体系、隐私泄露可疑行为特征分析与检测、云环境隐私泄露恶意行为快速定位与评估、隐私泄露恶意攻击免疫技术四个关键技术问题，课题首先从安全领域、安全威胁和安全隐患三个方面系统分析云计算的安全差距问题；然后重点从云计算服务器探针部署、基于核心节点信誉证书的联动监控体系、基于恶意代码样本空间关系特征的云计算恶意行为检测方法、隐私泄露行为定位和现场处理技术、虚拟机自省技术、基于交叉熵的恶意代码评估技术、基于树突细胞免疫的网络恶意代码免疫技术等方面，研究云计算环境隐私泄露恶意行为主动响应机制。最后实现云环境中隐私泄露恶意行为监控示范验证系统。从而解决云计算隐私泄露恶意行为应急处置的完整过程的关键技术问题，提高我国在云计算环境中隐私泄露恶意行为主动防御上的整体水平，并带来很好的市场前景和经济效益。

项目以云计算环境隐私泄露恶意行为应急响应为核心目标，针对此科学问题，课题首先分析云计算环境的安全隐患和安全体系结构，建立云计算环境联动监控体系；在此基础上，解决隐私泄露可疑行为特征分析与检测、云环境隐私泄露恶意行为快速定位与评估，以及隐私泄露恶意攻击免疫技术三大关键技术问题。.项目的主要研究内容阐述如下：① 研究云计算环境服务器探针部署策略，建立基于核心节点信誉证书的联动监控体系。② 项目开展了基于Petri网的云环境隐私泄露检测技术，以及MapReduce下差分隐私保护技术的研究。③ 项目建立了Spark云平台安全性能分析框架，并且对云环境中用户日志采集和处理算法进行定位和安全分析。④ 提出了基于混沌量子理论的差分隐私粒子群优化算法来实现云环境中的恶意行为免疫。⑤ 在前面四个研究内容解决关键技术的基础上，实现用于云计算恶意行为监控的示范验证系统。.最终以食品安全供应链的云平台和慢病康复管理云平台安全需求为例，项目研发了云环境中隐私泄露恶意行为监控示范验证系统，将项目研发的核心算法集成于云平台中，用于云平台安全的隐私泄露隐患分析和安全监测。项目的研究成果为全面构建面向云服务系统的安全防护技术奠定了坚实的理论和技术基础。