Apparatus and method for managing cloud computing infrastructure access based on dynamic parallel nodes
Disclosed herein are an apparatus and method for managing cloud computing infrastructure access based on dynamic parallel nodes. The apparatus for managing cloud computing infrastructure access based on dynamic parallel nodes may be configured to configure at least two of multiple compute nodes included in a computing infrastructure as representative nodes at preset intervals, validate, by the representative nodes, a user with respect to a remote command requested by the user for the computing infrastructure, and forward the remote command requested by a validated user to a target compute node included in the computing infrastructure.
1 . An apparatus for managing cloud computing infrastructure access based on dynamic parallel nodes, comprising:
one or more processors; and
a memory configured to store at least one program that is executed by the one or more processors,
wherein the at least one program is configured to:
configure at least two of multiple compute nodes included in the cloud computing infrastructure as representative nodes at preset intervals,
validate, by the representative nodes, a user with respect to a remote command requested by the user for the cloud computing infrastructure, and
forward the remote command requested by the validated user to a target compute node included in the cloud computing infrastructure,
wherein the at least one program is configured to:
check, by each of the representative nodes, whether a same request has been received from the user by exchanging requests received from the user with each other; and
in response to determining that the same request has not been received by the representative nodes, return a falsified response value to the user so as to confuse a potential attacker.
2 . The apparatus of claim 1 , wherein the at least one program is configured to configure the representative nodes in a multi-layer structure.
3 . The apparatus of claim 2 , wherein the at least one program is configured to determine that validation of the user has succeeded only when the remote command is forwarded to the target compute node through the representative nodes configured in the multi-layer structure.
4 . The apparatus of claim 1 , wherein the at least one program is configured to set a time window for an accepted request time interval for the remote command with respect to the representative nodes.
5 . The apparatus of claim 4 , wherein the at least one program is configured to determine that validation of the user has succeeded only when the remote command is requested from representative nodes within the time window.
6 . The apparatus of claim 4 , wherein the at least one program is configured to set an accepted number of requests corresponding to the remote command requested from the representative nodes within the time window.
7 . The apparatus of claim 6 , wherein the at least one program is configured to determine that validation of the user has succeeded only when a remote command corresponding to the accepted number of requests is requested from the representative nodes within the time window.
8 . The apparatus of claim 1 , wherein the at least one program is configured to set a request sequence related to an order in which the remote command is requested from the representative nodes.
9 . The apparatus of claim 8 , wherein the at least one program is configured to determine that validation of the user has succeeded only when the order in which the remote command is requested from the representative nodes depending on the request sequence matches the set request sequence.
10 . The apparatus of claim 1 , wherein the at least one program is configured to convert the remote command of the user into a command format corresponding to the target compute node using information stored in a command mapping database.
11 . A method for managing cloud computing infrastructure access based on dynamic parallel nodes, comprising:
configuring at least two of multiple compute nodes included in the cloud computing infrastructure as representative nodes at preset intervals;
validating, by the representative nodes, a user with respect to a remote command requested by the user for the cloud computing infrastructure; and
forwarding the remote command requested by a validated user to a target compute node included in the cloud computing infrastructure,
wherein validating the user comprises:
checking, by each of the representative nodes, whether a same request has been received from the user by exchanging requests received from the user with each other; and
in response to determining that the same request has not been received by the representative nodes, returning a falsified response value to the user so as to confuse a potential attacker.
12 . The method of claim 11 , wherein configuring as the representative nodes comprises:
configuring the representative nodes in a multi-layer structure.
13 . The method of claim 12 , wherein validating the user comprises:
determining that validation of the user has succeeded only when the remote command is forwarded to the target compute node through the representative nodes configured in the multi-layer structure.
14 . The method of claim 11 , wherein configuring as the representative nodes comprises:
setting a time window for an accepted request time interval for the remote command with respect to the representative nodes.
15 . The method of claim 14 , wherein validating the user comprises:
determining that validation of the user has succeeded only when the remote command is requested from representative nodes within the time window.
16 . The method of claim 14 , wherein configuring as the representative nodes further comprises:
setting an accepted number of requests corresponding to the remote command requested from the representative nodes within the time window.
17 . The method of claim 16 , wherein validating the user comprises:
determining that validation of the user has succeeded only when a remote command corresponding to the accepted number of requests is requested from the representative nodes within the time window.
18 . The method of claim 11 , wherein configuring as the representative nodes comprises:
setting a request sequence related to an order in which the remote command is requested from the representative nodes.
19 . The method of claim 18 , wherein validating the user comprises:
determining that validation of the user has succeeded only when the order in which the remote command is requested from the representative nodes depending on the request sequence matches the set request sequence.
20 . The method of claim 11 , wherein forwarding the remote command comprises: converting the remote command of the user into a command format corresponding to the target compute node using information stored in a command mapping database.