Research and practice of SASE cloud security

Chaoyang YE; Xin WANG; Shicong ZHANG; Zhiyong ZHAN; Yisha LIU

doi:10.11959/j.issn.1000-0801.2022019

您当前的位置：

首页 >

文章列表页 >

Research and practice of SASE cloud security

Engineering and Application | 更新时间：2024-06-05

- Research and practice of SASE cloud security
- Telecommunications Science Vol. 38, Issue 1, Pages: 140-149(2022)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2022019
  CLC： TN929
- Published Online：2022-01，
  
  Published：20 January 2022
- 稿件说明：
移动端阅览
Chaoyang YE, Xin WANG, Shicong ZHANG, et al. Research and practice of SASE cloud security[J]. Telecommunications science, 2022, 38(1): 140-149.
DOI：

Chaoyang YE, Xin WANG, Shicong ZHANG, et al. Research and practice of SASE cloud security[J]. Telecommunications science, 2022, 38(1): 140-149. DOI： 10.11959/j.issn.1000-0801.2022019.

摘要

摘要：互联网发展到今天，与传统网络相比已出现了翻天覆地的变化，在当今网络的变革中，“云化”成了企业IT架构演进的主流方向，因此对云安全的要求也越来越高，主要介绍了通过SASE云安全架构的实践部署，解决客户上云安全问题。提出了独特完整的SASE解决方案，该方案将安全功能与SD-WAN功能结合，构建统一管控平台、集中部署核心安全资源池按需调用，实现对恶意软件或恶意活动的实时监控、智能分析和自动拦截。实践证明该方案在统一管控、入侵检测与防御、精细化访问控制等方面达到预期效果，能够充分保障企业的云上安全。

Abstract

With the development of the Internet today

earth shaking changes have taken place compared with the traditional network.In today's network reform

＆quot;cloud＆quot; has become the mainstream direction of the evolution of enterprise IT architecture

so the requirements for cloud security are becoming higher and higher.The practical deployment scheme of SASE cloud security architecture was introduced to solve the problem of cloud security for customers.A unique and complete SASE solution was proposed

which combined security functions with SD-WAN functions

and realized real-time monitoring

intelligent analysis and automatic interception of malware or malicious activities by building a unified management and control platform and centralized deployment of core security resource pool.Practice has proved that the scheme achieves the expected results in unified management and control

intrusion detection and defense

fine access control and so on

and can fully ensure the cloud security of enterprises.

关键词

Keywords

references

李长连 , 马季春 , 蔺旋 . 基于SD-WAN构建SASE模型思路浅析 [J ] . 邮电设计技术 , 2021 ( 06 ): 78 - 83 .

LI C L , MA J C , LIN X . Research and design of SASE model based on SD-WAN [J ] . Designing Techniques of Posts and Tel-ecommunications , 2021 ( 6 ): 78 - 83 .

林世荣 , 姜守旭 . 软件定义企业级无线网络平台设计与实现 [J ] . 智能计算机与应用 , 2021 , 11 ( 02 ): 210 - 215 .

LIN S R , JIANG S X . Design and implementation of software defined enterprise wireless network platform [J ] . Intelligent Computer and Applications , 2021 , 11 ( 2 ): 210 - 215 .

章岐贵 , 黄海 , 汪有杰 . 基于零信任的软件定义边界安全模型研究 [J ] . 信息技术与信息化 , 2020 ( 11 ): 92 - 94 .

ZHANG Q G , HUANG H , WANG Y J . Research on software definition boundary security model based on zero trust [J ] . In-formation Technology and Informatization , 2020 ( 11 ): 92 - 94 .

康敏 . 内生安全 SD-WAN 网络架构与关键设备方案研究 [J ] . 信息安全与通信保密 , 2021 , 19 ( 7 ): 95 - 104 .

KANG M . Research on an endogenous safety SD-WAN net-work architecture and technical proposal of key equipment [J ] . Information Security and Communications Privacy , 2021 , 19 ( 7 ): 95 - 104 .

网络安全的未来在云端 [EB ] . 2019 .

secure-access-service-edge [EB ] . 2019 .

Views

473

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Carrier-grade NTP clock synchronization scheme of SD-WAN network

Research on access schemes of SD-WAN multi-cloud aggregation platform

Cloud-network convergence solution based on SRv6

SD-WAN tunnel technology and network constuction

Adaptive security architecture defense platform based on software defined security

Related Author

Yu WANG

Ling TANG

Yongming YAN

Qiangen ZHAO

Songyang QI

Jiajun MIN

Qiangen ZHAO

Yongming YAN

Related Institution

Shanghai Branch of China Telecom Co.,Ltd.

Shanghai Feiliji Information Technology Co., Ltd.

Mobile Internet System and Application Security National Engineering Laboratory

Research Institute of China Telecom Co., Ltd.

Institute of Information Engineering,Chinese Academy of Science

⁰