發(fā)布時間：2018-06-16 03:25

  本文選題：云計算 + 安全�。� 參考：《西安電子科技大學(xué)》2014年碩士論文

【摘要】：在云計算日漸成熟的今天，公有云已被廣泛的應(yīng)用，而這些應(yīng)用也成就了很多新興企業(yè)。然而私有云的應(yīng)用卻受技術(shù)與成本的限制而發(fā)展緩慢，開源云解決方案OpenStack的出現(xiàn)為解決這一問題提供了契機(jī)，但是OpenStack并沒有為私有云提供完善的安全保障，所以也只能被安全技術(shù)背景較強(qiáng)的公司應(yīng)用。蜜罐系統(tǒng)受安全性、性能和保真度這三個因素的相互制約而無法被有效的廣泛應(yīng)用，目前只能供科研人員研究未知攻擊�；贠penStack的混合蜜罐方案就是在這種背景下設(shè)計的，它不僅為私有云提供了更高的安全性，而且解決了蜜罐系統(tǒng)搭建的安全性、保真度與性能這三個相互制約因素帶來的難題，讓蜜罐系統(tǒng)具有了更高的實(shí)用價值。 本文所做的工作如下： 1．提出一種新的混合蜜罐方案，并結(jié)合OpenStack把其部署在私有云上。新型混合蜜罐方案是通過低交互蜜罐與高交互蜜罐結(jié)合的方法實(shí)現(xiàn)，如果把這種方案部署在傳統(tǒng)IT（Information Technology）設(shè)施上，我們只能保證其安全性與保真度，性能問題卻無法有效解決。在把其部署在基于OpenStack的私有云上后，保證了私有云用戶對計算與存儲資源的按需使用，使性能得到了保障。同時，也為私有云提供了一種安全解決方案。 2．對新系統(tǒng)進(jìn)行了模擬，，通過對新系統(tǒng)的參數(shù)配置，有效的實(shí)現(xiàn)了對各種攻擊的抓取，并對抓取結(jié)果進(jìn)行了統(tǒng)計分析。分析表明，新的混合系統(tǒng)能夠收集到網(wǎng)絡(luò)上的一些新型攻擊。
[Abstract]:Nowadays, the public cloud has been widely used in cloud computing, and these applications have made a lot of new enterprises. However, the application of private cloud is slow to develop due to the limitation of technology and cost. OpenStack, an open source cloud solution, provides an opportunity to solve this problem, but OpenStack does not provide perfect security for private cloud. Therefore, it can only be used by companies with strong background in security technology. Honeypot system is restricted by security, performance and fidelity, so it can not be used widely. At present, honeypot system can only be used by researchers to study unknown attacks. The hybrid honeypot scheme based on OpenStack is designed under this background. It not only provides higher security for private cloud, but also solves the problems caused by the three mutual constraints of honeypot system security, fidelity and performance. The honeypot system has higher practical value. The work of this paper is as follows: 1. A new mixed honeypot scheme is proposed and deployed on private cloud with OpenStack. The new mixed honeypot scheme is realized by the combination of low interactive honeypot and high interactive honeypot. If we deploy this scheme in the traditional ITT Information Technology, we can only guarantee its security and fidelity, but the performance problem can not be solved effectively. After it is deployed on the private cloud based on OpenStack, it ensures that the private cloud users can use the computing and storage resources on demand, so that the performance is guaranteed. At the same time, it also provides a security solution for private cloud. 2. The new system is simulated. Through the parameter configuration of the new system, the grab of all kinds of attacks is realized effectively, and the result of grab is analyzed statistically. The analysis shows that the new hybrid system can collect some new attacks on the network.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.08


本文編號：2025054