Analysis of software defined security model and architecture

Chunmei GUO; Jun MA; Hao GUO; Xueyao BI; Ruhui ZHANG; Shaomin ZHU; Congyi YANG

doi:10.11959/j.issn.1000-0801.2017074

您当前的位置：

首页 >

文章列表页 >

Analysis of software defined security model and architecture

Operation technology wide Angle | 更新时间：2024-06-05

- Analysis of software defined security model and architecture
- Telecommunications Science Vol. 33, Issue 6, Pages: 186-192(2017)
- 作者机构：
  
  1. 北京启明星辰信息安全技术有限公司，北京 100193
  2. 全球能源互联网研究院，北京 102209
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.1000-0801.2017074
  CLC： TP309
- Published Online：2017-06，
  
  Published：20 June 2017
- 稿件说明：
移动端阅览
Chunmei GUO, Jun MA, Hao GUO, et al. Analysis of software defined security model and architecture[J]. Telecommunications science, 2017, 33(6): 186-192.
DOI：

Chunmei GUO, Jun MA, Hao GUO, et al. Analysis of software defined security model and architecture[J]. Telecommunications science, 2017, 33(6): 186-192. DOI： 10.11959/j.issn.1000-0801.2017074.

摘要

目前大多数企业已经部署了基于策略访问控制的信息安全防御体系，但是随着云计算环境部署和网络攻击技术的发展，安全正成为云计算环境下亟待解决的重要问题，诸如能轻而易举地绕过传统防火墙、突破基于黑/白名单与特征匹配的安全防御机制等高级持续性攻击，给传统安全体系带来了新的挑战。分析了传统紧耦合安全防御体系在虚实结合网络环境下面临的问题，提出了软件定义安全的模型及其框架下的关键技术，实现了虚拟的和物理的网络安全设备与它们的接入模式、部署位置解耦合，为企业云计算环境下自适应的主动安全防护提供了有益的探索。

Abstract

Currently

most enterprises have deployed information security defense system based on policy access control.With cloud computing environment deployment and network attacking technology development

security has been regarded as one of the greatest problems in the cloud computing environment.The advanced persistent attacks including of bypassing the traditional firewall easily

breaking through the black and white list and feature matching of the security defense mechanism have included to the traditional security system new challenges.The problem in the traditional tightly coupled security defense system of combining the virtual with the true for construction of network environments was described

and a software defined security model and framework was provided.The decoupling scheme of access patterns and deployment position in combining the virtual with the true for construction of network environments was realized

which provided a beneficial exploration in the field of the adaptive active safety for enterprise cloud computing environment.

关键词

Keywords

references

刘文懋 , 裘晓峰 , 陈鹏程 , 等 . 面向 SDN 环境的软件定义安全架构 [J ] . 计算机科学与探索 , 2015 , 9 ( 1 ): 63 - 70 .

LIU W M , QIU X F , CHEN P C , et al . SDN oriented software-defined security architecture [J ] . Journal of Frontiers of Computer Science and Technology , 2015 , 9 ( 1 ): 63 - 70 .

裘晓峰 , 赵粮 , 高腾 . VSA和SDS:两种SDN网络安全架构的研究 [J ] . 小型微型计算机系统 , 2013 , 34 ( 10 ): 2299 - 2303 .

QIU X F , ZHAO L , GAO T . VSA and SDS:two security architectures in SDN [J ] . Journal of Chinese Computer Systems , 2013 , 34 ( 10 ): 2299 - 2303 .

左青云 , 陈鸣 , 赵广松 , 等 . 基于OpenFlow的SDN技术研究 [J ] . 软件学报 , 2013 , 24 ( 5 ): 1078 - 1097 .

ZUO Q Y , CHEN M , ZHAO G S , et al . Research on OpenFlow-based SDN technologies [J ] . Journal of Software , 2013 , 24 ( 5 ): 1078 - 1097 .

李陟 , 李小爽 . 通过虚拟导流突破云环境安全部署问题 [J ] . 邮电设计技术 , 2016 , 10 ( 1 ): 45 - 49 .

LI Z , LI X S . Through the virtual diversion to break through the cloud environment safety deployment issues [J ] . Designing Techniques of Posts and Telecommunications , 2016 , 10 ( 1 ): 45 - 49 .

林萍萍 , 毕军 , 胡虹雨 , 等 . 一种面向 SDN 域内控制平面可扩展性的机制 [J ] . 小型微型计算机系统 , 2013 , 34 ( 9 ): 1980 - 1983 .

LIN P P , BI J , HU H Y , et al . MSDN:a mechanism for scalable intra-domain control plane in SDN [J ] . Journal of Chinese Computer Systems , 2013 , 34 ( 9 ): 1980 - 1983 .

Views

1221

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Accelerated algorithm in attribute-based encryption over cloud environment

Technical evolution and development trend of quantum computing cloud platform

An access control scheme for IoT based on smart contracts and CP-ABE

Damage toughness assessment method of power backbone communication network based on power big data

Virtual machine scheduling model based on Shapley value modified genetic algorithm in cloud computing

Related Author

Guowei WU

Ning FAN

Laifu WANG

Shuai WANG

Jun SHEN

Huamin JIN

HAO Yuanchen

XIE Yuheng

Related Institution

Research Institute of China Telecom Co., Ltd.

NOVA Information Management School, New University of Lisbon, Lisbon

Faculty of Computing, Engineering and Media, De Montfort University

Henan International Joint Laboratory of Agricultural Big Data and Artificial Intelligence

College of Information and Management Science, Henan Agricultural University

⁰