基于聯(lián)動人侵檢測的云服務(wù)零信任內(nèi)網(wǎng)主動防御技術(shù)研究

打開文本圖片集

關(guān)鍵詞：聯(lián)動入侵檢測；云服務(wù)；零信任內(nèi)網(wǎng)；主動防御技術(shù)；安全態(tài)勢；蜜罐誘捕策略中圖分類號：TN915.08-34；TP393 文獻(xiàn)標(biāo)識碼：A 文章編號：1004-373X（2025）10-0147-05

Abstract：Inordertoensurethesecureoperationof thezero-trust intranetofcloudservicesandefectivelyimplement atackdefense，acloudservicezero-trustintranetactivedefense technologybasedoncollaborativeintrusiondetectionis proposed.Inthistechnology，basedonthezero-trust intranetarchitectureofcloudserviceanditsowndefensemechanism structure，theK-meansalgorithmwithdensityparametersisusedtoclusterthenetworkoperationdataandperceivetheintranet security situation.Thehoneypottrappngstrategyisusedtolureatackersinthenetwork basedonpereptualresults.In combinationoffuzzyconstraintcontrolmethodwithhoneypottrapping，thejointprocessingofattack behaviorischievedto completethezero-trustintranetactivedefenseofcloudservices.Theresultsshowthattheproposeddefensetechnologyhasgood intranetsituationalawarenessefet，thevalusofintraclustercompactnsaeallaboe.9O6，theintrusiobehviorspectal values are all within the range of ±0.5 dB，and the active defense effect is good.

Keywords：colaborativeintrusiondetection;cloudservice;zero-trustintranet;activedefense technology;securitysituation; honeypot trapping strategy

0 引言

云服務(wù)零信任內(nèi)網(wǎng)可以理解為在云服務(wù)環(huán)境中采用零信任原則構(gòu)建的內(nèi)網(wǎng)安全體系，其架構(gòu)打破了傳統(tǒng)的信任邊界，使得每個實(shí)體都需要經(jīng)過持續(xù)的身份驗(yàn)證和訪問控制[1-2]，從而有效地降低了內(nèi)部安全風(fēng)險(xiǎn)。（剩余5313字）