面向网站应用的SDS自适应安全防御体系  

Adaptive security architecture defense platform based on software defined security

作　　者：卢梦瑶 唐洪玉 唐维[1] 张鉴[1] LU Mengyao;TANG Hongyu;TANG Wei;ZHANG Jian(Institute of Cloud Security,Research Institute of China Telecom Co.,Ltd.,Beijing 102209,China)

机构地区：[1]中国电信股份有限公司研究院云安全工程研究中心,北京102209

出　　处：《电信科学》2020年第12期133-138,共6页Telecommunications Science

摘　　要：自适应安全架构依托持续性监测与回溯分析形成了集防御、监测、响应、预测为一体的安全防护体系,对于高级定向攻击具备智能与弹性安全防护能力。通过对自适应安全及软件定义安全框架进行研究,结合现有网络安全现状,对网站应用安全问题进行分析,并提出了一种可实现的自适应安全防护平台的初步应用。Based on continuous monitoring and retrospective analysis,adaptive security architecture was constructed to be security defense system integrating prevention,detection,response and prediction,which possesses intelligent and elastic defense ability concerning about advanced directive attacks.An essential implementable adaptive security defense platform was therefore introduced and applied correspondingly according to a thorough research of adaptive security architecture and software defined security,combined with internet security environment.Besides,website application security issues were also analyzed.

关 键 词：自适应安全框架 云安全 软件定义安全 网站应用安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]