Abstract: The development of cloud computing technology brings new challenges to network security management. The security management of host assets is more difficult and complex. However, security administrators do not fully grasp the host status, vulnerability and attack behavior. Therefore, they need to establish a comprehensive security detection and analysis system for cloud hosts to improve the ability of security risk discovery, to improve the level of security event management and to detect all kinds of intrusion and attack behaviors.

Key words: cloud security, host-based intrusion detection, vulnerability assessment, asset scan, risk management

摘要： 云计算技术的发展给网络安全管理带来全新挑战，云主机的安全管理难度和复杂度增加，安全管理人员对主机状态、漏洞情况、攻击行为掌握不全.因此，安全管理人员需建立全面的云主机安全检测与分析体系，提升安全风险发现能力，提高安全事件处置水平，检测各类入侵攻击行为.

关键词: 云安全, 主机入侵检测, 漏洞评估, 资产识别, 风险管理