Interpretation of Kingsoft's three core systems of "cloud security"

Bkjia.com comprehensive report: Kingsoft drug overlord "cloud security" is a security architecture for network-wide defense to solve the severe security situation on the Internet after the commercialization of Trojans. It consists of intelligent clients, cluster servers, and open platforms. "Cloud Security" is an enhancement and supplement based on existing anti-technologies. The ultimate goal is to ensure faster and more comprehensive security protection for users in the Internet age.

First, stable and efficient smart clients can be independent security products or security components integrated with other products, such as Kingsoft drug overlord 2009 and Baidu Security Center, it provides basic functions for sample collection and threat processing for the entire cloud security system.

Figure 1

Second, the server supports distributed massive data storage centers, professional security analysis services, and smart analysis and mining of security trends. It also cooperates with clients, provides cloud security services for users.

Figure 2

Finally, cloud security is based on an open security service platform, which provides third-party security partners with platform support against viruses. Kingsoft drug overlord cloud security not only provides security services for third-party security partner users, but also relies on cooperation with third-party security partners to establish a network-wide defense system. Every user is involved in the network-wide defense system, and the virus will no longer be alone.

Kingsoft drug overlord "cloud security" Architecture

A mercury platform supporting massive sample storage and Computation

Internet trusted Authentication Service

Crawler System

Figure 3

Introduction to Kingsoft's three core systems of "cloud security"

1. Mercury Platform

Based on the distributed storage and computing platform, combined with industry-leading behavior analysis technology, the system automatically analyzes and processes millions of unknown file samples every day. And update the processing results to the trusted authentication service in real time to provide timely and accurate services for the client.

A. The focus of the behavior analysis system is on unknown viruses)

Collects and records suspicious behaviors reported by monitoring file, network, mail, and risky behaviors such as process injection, modification of registry sensitive items, and drive opening, based on the correlation of events, the behavior is comprehensively analyzed to identify unknown virus behavior.

In the face of massive virus samples, only a strong virus analysis system is far from enough. How to properly store and process virus samples is a problem that must be solved, A powerful distributed storage and computing platform to provide assurance.

B. Distributed Storage Platform

The distributed storage platform provides a unified access mode for the application platform to properly store massive virus samples and white list samples. With the automatic backup capability, Kingsoft mercury platform has stored hundreds of TB of files.

C. Distributed Computing Platform

Using the Distributed Automatic Analysis and Processing Platform and behavior analysis technology, the mercury platform can process more than 1 million of unknown file samples every day, automatically scan and analyze the samples, and automatically extract the corresponding virus killing scripts. At the same time, simply expanding the number of machines can improve the processing capability. Theoretically, there is no upper limit on the processing capability.

2. Internet trusted Authentication Service

:

Figure 4

The "Internet trusted Authentication Service" collects executable files generated on the Internet every second, and performs automatic and manual analysis, synchronize the "Internet trusted authentication center" on the server side in seconds. The trusted authentication service can handle hundreds of millions of High-load queries every day.

3. crawler System

Crawler Working principle:

Figure 5

Crawler system architecture:

Figure 6

1. Cloud security technology topics: cloud security
2. Kingsoft drug overlord 2009 pushes the arrival of the "cloud security" Security 2.0 era
3. Jinshan: it is useless to build only one "cloud security" Shell