政务云东西向流量监测技术研究及项目实践  

Research and Project Practice of East-West Flow Monitoring Technology of Government Cloud

作　　者：杨优[1] YANG You(Nanjing Information Center,Nanjing 210019,China)

机构地区：[1]南京市信息中心,江苏南京210019

出　　处：《现代信息科技》2022年第6期110-114,共5页Modern Information Technology

摘　　要：阐述了政务云面临的安全威胁和风险,对政务云环境下目前主流的安全技术实践进行了研究和分析,主要分析了政务云环境下东西向流量面临难以检测、检测影响性能、检测结果滞后等技术挑战,详细介绍了虚机东西向引流及大数据分析、流量策略控制、业务自熔断、安全态势感知等关键技术的设计架构和实践效果,解决了云内威胁检测存在盲区的问题,提升了政务云环境的安全性。This paper expounds the security threats and risks faced by the government cloud,studies and analyzes the current mainstream security technology practice in the government cloud environment,mainly analyzes the technical challenges faced by the east-west flow in the government cloud environment,such as difficult detection,detection affecting performance and lagging detection results,and introduces in detail the design architecture and practical effect of key technologies of the East-West drainage of virtual machine,big data analysis,flow strategy control,business self fusing,security situational awareness and so on.It solves the problem of blind area in cloud threat detection and improve the security of government cloud environment.

关 键 词：云计算 东西向流量 策略引流 流探针 智能威胁检测 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]