SD-WAN部署中的安全问题及应对措施  

Security problems and countermeasures in SD-WAN deployment

作　　者：田兴果 金世成 TIAN Xingguo;JIN Shicheng(Fushun Branch,China Telecom Corporation Limited,Fushun Liaoning 113009)

机构地区：[1]中国电信股份有限公司抚顺分公司,辽宁抚顺113009

出　　处：《辽宁师专学报（自然科学版）》2023年第4期48-51,共4页Journal of Liaoning Normal College(Natural Science Edition)

摘　　要：相较于传统的WAN,SD-WAN提高了部署效率,降低了成本,并降低了网络管理和运维的复杂程度,但却存在连接不稳定、数据易泄露、身份认证和访问控制难度大、网络攻击增多等4个方面安全问题.对此,结合现有的网络安全技术提出应对措施,即采用加密和隧道技术、部署威胁检测系统和入侵防御系统、采用身份认证和访问控制机制,以及加强安全监控和日志管理.这些措施有效保护了SD-WAN的数据传输安全.Compared with the traditional WAN,SD-WAN has improved the deployment efficiency,reduced the cost,and decreased the complexity of network management and operation and maintenance,but there are four security problems such as unstable connections,data leakage risks,difficulties in identity authentication and access control,and an increase in network attacks.In this regard,the corresponding countermeasures are proposed based on the existing network security technologies,namely the adoption of encryption and tunnel technology,the deployment of threat detection system and intrusion prevention system,the adoption of identity authentication and access control mechanism,and the strengthening of security monitoring and log management.These measures effectively protect the data transmission security of SD-WAN.

关 键 词：SD-WAN 安全挑战 应对措施 入侵防御系统 访问控制机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]