面向服务的数据中心安全框架  

Service-oriented security framework for datacenter networks

作　　者：胡腾[1] 李观文[2] 周华春[2] 

机构地区：[1]中国工程物理研究院计算机应用研究所,四川绵阳621900 [2]北京交通大学电子信息工程学院,北京100044

出　　处：《电信科学》2018年第1期8-16,共9页Telecommunications Science

基　　金：NSAF联合基金资助项目(No.U1530118);国家自然科学基金资助项目(No.61271202);国防基础科研基金资助项目(No.JCKY2016212C005)~~

摘　　要：随着数据中心网络在云计算领域的大规模商用,数据网络的安全问题愈发受到重视。然而,由于传统数据中心安全设备部署方式静态僵化,难以满足动态多变的网络安全态势,无法应对新的安全威胁。因此,提出一种面向服务的数据中心安全框架。基于虚拟化技术和软件定义网络,将虚拟化的安全功能灵活组合,并实现安全策略动态更新的过程。通过原型系统测试验证了所提安全框架的可行性和有效性,为数据中心网络的灵活性和安全性提升提供了一种解决方案。With the large-scale deployment of datacenters in cloud computing,there is an increasing attention to their security issues.However,with the ossify deployment of traditional security devices,it is hard to meet the requirements of dynamical network security situation and copy with new kinds of security threats.Therefore,a service-oriented security framework for datacenter networks was proposed,which was able to compose the virtualized security functions flexibly and update the security policies dynamically based on virtualization technology and software-defined networking.With the implementation of prototype,the feasibility and availability of the proposed security framework was proved,and a solution to promote the flexibility and security of datacenter networks was provided.

关 键 词：数据中心网络 安全功能链 安全策略部署 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]