关键词: 云安全, 云安全分析系统, 入侵检测系统, 流量分析

Abstract: In view of the shortcomings of current mainstream cloud security analysis system whose intelligence is not high or processing capacity is not strong, the paper puts forward a parallel processing ability of streamline PF_RING model, the biological sequence matching algorithm is introduced into the cloud intrusion detection model, with the combination of state matching algorithm and vulnerability assessment?algorithm, so the Cloud Security Comprehensive Analysis System（CSAS） is designed and implemented. Experiments show that the system can carry out flow analysis, intrusion detection and vulnerability scanning under huge amounts of data, compared with the similar system, its processing capacity is promoted nearly 10 times and the capacity of security protection is improved 65.43%. This system has effectively improved the ability of cloud security analysis system for intrusion detection, and provides effective protection for the security of cloud platform.

Key words: cloud security, cloud security analysis system, Intrusion Detection System（IDS）, network traffic analysis