Design Of The Offensive And Defensive Feedback Defense Scheme On Cloud Desktop And Implementation Of The System

With the rapid development of Cloud Platform, Mobile Office have swept across the world. Companies take Cloud Desktop Office as the preferred, and build Cloud Desktop environment to ensure company information privacy, unified operation and maintenance, safe and stable operation. However, the new environment will also introduce the new security issues, the combination of security threats on Cloud Platform and traditional security issues hindering the process. Cloud desktop virtualization structure determines its defense structure is no longer a string type, to a certain extent; cloud server defense is more sensitive than traditional one. Investigation shows that domestic exist some technical support on Cloud Desktop Security, rather than a system, effectively, dynamic defense scheme. Therefore, defense scheme on Cloud Desktop Security is not only of interest to users, but also a topic worthy of study. The main work of this paper is as follows:(l)This paper analyzed the requirements of solutions to new safety problems caused by the characteristics of cloud platform. Through the analysis on Cloud platform specific network structure, an unprecedented computing power, low attack cost, defense monitor which is difficult to control and the summary of current cloud platform solutions, combined with the analysis of the characteristics of cloud desktop and the technical scheme of industry, we found that the lack of real-time and system defense scheme on cloud desktop security.(2)This paper proposed the defense scheme of offensive and defensive feedback defense graph on Cloud Desktop on the basis of cloud desktop defense architecture.It marked the targeted attacks design according to the defense analysis, used the cloud desktop platform for attacking test, feedback attack graph to security defense and optimized the defense map. It adopted reverse breadth search algorithm to find attack vulnerable points, which reduced the blindness and the false alarm probability of vulnerability mining. It introduced the offensive and defensive game model, to compliance with the principle of appropriate security.(3)This paper designed and implemented Offensive and Defensive Feedback Defense systems on Cloud Desktop. This paper mainly used the WEB system file information processing technology and virtual technology. The system included offensive and defensive information processing module, offensive and defensive feedback map automatic generation module, security knowledge base on Cloud Desktop module, situation analysis module, Cloud desktop offensive and defensive combat module and system management module.(4)This paper took a famous provider of Cloud Desktop as the defense object for system testing and demonstrated acquisition of offensive and defensive data on cloud desktop, the production of offensive and defensive feedback map, the optimization of defense scheme through analyze the process of attack and defense feedback, and the display of the results of situation.This paper proposed the scheme and implemented the system. It was conducive to maintenance staff of cloud desktop to clear security defense steps according to the defense scheme, share defense experience on the use of cloud desktop security knowledge base, quickly build a test environment on the offensive and defensive combat platform of Cloud Desktop, optimize defense scheme based on the analysis of attack graph.