基于聯動人侵檢測的云服務零信任內網主動防御技術研究

打開文本圖片集

關鍵詞：聯動入侵檢測；云服務；零信任內網；主動防御技術；安全態(tài)勢；蜜罐誘捕策略中圖分類號：TN915.08-34；TP393 文獻標識碼：A 文章編號：1004-373X（2025）10-0147-05

Abstract：Inordertoensurethesecureoperationof thezero-trust intranetofcloudservicesandefectivelyimplement atackdefense，acloudservicezero-trustintranetactivedefense technologybasedoncollaborativeintrusiondetectionis proposed.Inthistechnology，basedonthezero-trust intranetarchitectureofcloudserviceanditsowndefensemechanism structure，theK-meansalgorithmwithdensityparametersisusedtoclusterthenetworkoperationdataandperceivetheintranet security situation.Thehoneypottrappngstrategyisusedtolureatackersinthenetwork basedonpereptualresults.In combinationoffuzzyconstraintcontrolmethodwithhoneypottrapping，thejointprocessingofattack behaviorischievedto completethezero-trustintranetactivedefenseofcloudservices.Theresultsshowthattheproposeddefensetechnologyhasgood intranetsituationalawarenessefet，thevalusofintraclustercompactnsaeallaboe.9O6，theintrusiobehviorspectal values are all within the range of ±0.5 dB，and the active defense effect is good.

Keywords：colaborativeintrusiondetection;cloudservice;zero-trustintranet;activedefense technology;securitysituation; honeypot trapping strategy

0 引言

云服務零信任內網可以理解為在云服務環(huán)境中采用零信任原則構建的內網安全體系，其架構打破了傳統(tǒng)的信任邊界，使得每個實體都需要經過持續(xù)的身份驗證和訪問控制[1-2]，從而有效地降低了內部安全風險。（剩余5313字）