ENCRYPTION SYSTEM FOR INTRUSION DETECTION SYSTEM OF CLOUD COMPUTING SERVICE

摘要

PURPOSE: An encryption system for invasion detection in a cloud computing service is provided to provide an encryption technique and an authentication between nodes of an invasion detecting system. CONSTITUTION: An elementary detector (11) monitors a virtual machine. In case the traffic value of the virtual machine exceeds a threshold value which a user sets up, the elementary detector generates an elementary alarm. An invasion detection determining unit (20) compares the elementary alarm with a blacklist of a local database. If the elementary alarm is same with the blacklist, the invasion detection determining unit generates a hyper alarm by determining an invasion. An invasion detection administrator (30) transmits the elementary alarm and the hyper alarm. [Reference numerals] (10) Virtual machine; (11) Basic detector; (12) Basic warning unit; (13) User interface application unit; (14) Analysis unit; (15) Basic detector encoder; (16) Basic detector encoder; (20) Invasion detector; (21) Warning linker; (22) Invasion detection generator; (23) Form transformer; (24) Invasion detection judger ID; (25) Detector decoder; (26) Detector encoder; (30) Invasion detection administrator; (31) Warning collection unit; (32) User interface setting unit; (33) Warning treatment unit; (34) Notification unit; (35) Invasion detection administrator ID; (36) Administrator decoder; (37) Secrete key generator; (41) Local database; (42) Global database; (AA) Cloud provider 2; (BB) Physical machine; (CC,EE) Virtual interface; (DD,FF) Guest OS; (GG) Hyper visor (virtual machine monitor); (HH) Hardware; (II) Cloud provider 1