融合区块链技术的容器云安全应用  

Application of Container Cloud Security Integrated with Blockchain Technology

作　　者：郑尚卓 李学韬 王雷 王磊[2] 恽珺[3] ZHENG Shangzhuo;LI Xuetao;WANG Lei;WANG Lei;YUN Jun(State Grid Blockchain Technology(Beijing)Co.,Ltd.,Beijing 100053;State Grid Beijing Electric Power Co.,Ltd.,Beijing 100053;Information and Communication Company of State Grid Beijing Electric Power Co.,Ltd.,Beijing 100053)

机构地区：[1]国网区块链科技(北京)有限公司,北京100053 [2]国网北京市电力公司,北京100053 [3]国网北京市电力公司信息通信分公司,北京100053

出　　处：《电力安全技术》2022年第2期38-44,共7页Electric Safety Technology

摘　　要：针对容器云平台发生的内外部网络故障导致的容器云数据明文展示、恶意软件植入、容器编排故障、攻击容器宿主机的问题,应用区块链技术的存证、溯源、智能合约、非对称加密的技术特性,通过在云端平台构建虚拟链的形式,将容器云运行过程中发生的网络安全事件上链,基于区块链技术配置容器的分发功能,管理容器的生命周期数据,从而实现分布式技术在云计算平台的应用,优化现有的容器云的安全管理框架,提升云平台安全防护的健壮性。In allusion to the problems in the container cloud platform such as the plaintext display of container cloud data, malware implantation, container arrangement failure and attacks on container host caused by internal and external networks, the technical characteristics of blockchain technology concerning certificate storage, traceability, smart contract and asymmetric encryption are applied to build a virtual chain in the cloud platform, which chains the network security events occurred in the operation of container cloud, configure the distribution function of container based on blockchain technology, and manage the life-cycle data of container,so as to realize the application of distributed technology in the cloud computing platform, optimize the existing security management framework of container cloud, and improve the robustness of security protection of the cloud platform.

关 键 词：容器云 虚拟链 区块链 容器编排 非对称加密 智能合约 

分 类 号：TM08[电气工程—电工理论与新技术]