A Real-time Security Situation Assessment System Designed for Cloud Platform

Abstract

Security situation assessment is an effective way to analyze the situation of cloud platform, which helps administrator understand the current cloud platform security status and develop policies to reduce risks in time. However, the existing researches for security situation assessment mostly focus on network security situation assessment. The proposed methods for network are not so suitable for cloud platform. For the first time, we propose a security situation assessment system for cloud platform. In consideration of diversity, heterogeneous, multi-source of data in cloud platform security assessment, we use the cloud computing security indicator system to construct a multi-source heterogeneous data fusion method which is used to assess the situation of cloud platform. In detail, we utilize big data processing tools and real-time data processing tools to transform the multi-source and heterogeneous data of cloud platform into the situational indicators of each protection level, which are further used to calculate the overall security situation in real time. The accuracy and practicability of the security situation assessment system are verified on real-word cloud platform in our experiments.