面向服务的数据中心安全框架

doi:10.11959/j.issn.1000-0801.2018031

Abstract

Abstract:

With the large-scale deployment of datacenters in cloud computing,there is an increasing attention to their security issues.However,with the ossify deployment of traditional security devices,it is hard to meet the requirements of dynamical network security situation and copy with new kinds of security threats.Therefore,a service-oriented security framework for datacenter networks was proposed,which was able to compose the virtualized security functions flexibly and update the security policies dynamically based on virtualization technology and software-defined networking.With the implementation of prototype,the feasibility and availability of the proposed security framework was proved,and a solution to promote the flexibility and security of datacenter networks was provided.

Key words: datacenter network, security function chaining, security policy deployment

CLC Number:

TP393

Teng HU,Guanwen LI,Huachun ZHOU. Service-oriented security framework for datacenter networks[J]. Telecommunications Science, 2018, 34(1): 8-16.

Figures/Tables 12

References 22

[1]	Cisco. Cisco Data Center Security Study[R]. 2017.
[2]	韦乐平 . SDN的战略性思考[J]. 电信科学, 2015,31(1): 7-12.
	WEI L P . Strategic thinking on SDN[J]. Telecommunications Science, 2015,31(1): 7-12.
[3]	王歆平, 王茜, 刘恩慧 ,等. 基于 SDN 的按需智能路由系统研究与验证[J]. 电信科学, 2014,30(4): 8-14.
	WANG X P , WANG Q , LIU E H ,et al. Research and verification on SDN-based on-demand smart routing system[J]. Telecommunications Science, 2014,30(4): 8-14.
[4]	李丹, 刘方明, 郭得科 ,等. 软件定义的云数据中心网络基础理论与关键技术[J]. 电信科学, 2014,30(6): 48-59.
	LI D , LIU F M , GUO D K ,et al. Fundamental theory and key technology of software defined cloud data center network[J]. Telecommunications Science, 2014,30(6): 48-59.
[5]	HAN B , GOPALAKRISHNAN V , JI L ,et al. Network function virtualization:challenges and opportunities for innovations[J]. IEEE Communications Magazine, 2015,53(2): 90-97.
[6]	NICK M , TOM A , HARI B ,et al. OpenFlow:enabling innovation in campus networks[J]. ACM SIGCOMM Computer Communication Review, 2008,38(2): 69-74.
[7]	CHUNG C J , XING T , HUANG D ,et al. SeReNe:on establishing secure and resilient networking services for an SDN-based multi-tenant datacenter environment[C]// IEEE International Conference on Dependable Systems and Networks Workshops,June 22-25,2015,Rio de Janeiro,Brazil. Piscataway:IEEE Press, 2015.
[8]	AMMAR M , RIZK M , ABDEL-HAMID A ,et al. A framework for security enhancement in SDN-based datacenters[C]// 2016 8th IFIP International Conference on New Technologies,Mobility and Security,November 21-23,2016,Larnaca,Cyprus. Piscataway:IEEE Press, 2016.
[9]	JOEL H , CARLOS P Service function chaining,RFC Editor,October 2015[R/OL].(2015-10-01)[2017-11-14]. .
[10]	KUMAR S , TUFAIL M , MAJEE S ,et al. Service function chaining use cases in data centers.Internet-Draft draft-ietf- sfcdc-use-cases-06[RB/OL].(2017-01-01)[2017-11-14]. .
[11]	LEIVADEAS A , FALKNER M , LAMBADARIS I ,et al. Resource management and orchestration for a dynamic service chain steering model[C]// IEEE Global Communications Conference,December 4-8,2016,Washington,DC,USA. Piscataway:IEEE Press, 2016.
[12]	WANG X , LIU Z , LI J ,et al. Tualatin:towards network security service provision in cloud datacenters[C]// 2014 3rd International Conference on Computer Communication and Networks,August 4-7,2014,Shanghai,China. Piscataway:IEEE Press, 2016.
[13]	KUMAR D , TUFAIL E , MAJEE L ,et al. Framework for interface to network security functions.Internet-Draft draftietf-i2nsf-framework-08,IETF Secretariat,October 2017[R/OL].(2017-10-10)[2017-11-10]. .
[14]	OpenDaylight SFC project[EB/OL].(2016-10-21)[2017-11-10]. .
[15]	Docker[EB/OL].(2017-01-01)[2017-11-10]. .
[16]	Open vSwitch[EB/OL].(2016-01-01)[2017-11-10]. .
[17]	Redis[EB/OL].(2017-01-01)[2017-11-10]. .
[18]	Openstack[EB/OL].(2017-01-01)[2017-11-10]. .
[19]	Iptables[EB/OL].(2014-01-01)[2017-11-10]. .
[20]	Snort[EB/OL].(2017-01-01)[2017-11-10]. .
[21]	PAUL Q , URI E , CARLOS P ,et al. Network service header (NSH):Internet-Draft draft-ietf-sfc-nsh-28[EB/OL].(2017-11-03)[2017-11-10]. .
[22]	Conf D[EB/OL].(2017-01-01)[2017-11-10]. .

Metrics

Recommended 0

No Suggested Reading articles found!

Service-oriented security framework for datacenter networks

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 12

References 22

Related Articles 15

Metrics

Recommended 0

[1]	Kaihui GAO, Dan LI. Data center networks with performance guarantee: a survey [J]. Telecommunications Science, 2023, 39(6): 1-21.
[2]	Yu LI, Zhaozhao LI, Ping LYU, Qinrang LIU. Design on the full-dimensional reconfiguration polymorphic network switching chip architecture [J]. Telecommunications Science, 2023, 39(6): 22-32.
[3]	Jiong LI, Yuxiang HU, Pengshuai CUI, Le TIAN, Yongji DONG. Research on incremental deployment mechanism of network modality for polymorphic network environment [J]. Telecommunications Science, 2023, 39(6): 33-43.
[4]	Zehua GUO, Haowen ZHU, Tongwen XU. Network modal innovation for distributed machine learning [J]. Telecommunications Science, 2023, 39(6): 44-51.
[5]	Aihua LIU, Hanguang LUO, Jianzhong WEN, Zhiguo ZHAN. Research on isolated-forwarding technology oriented polymorphic network [J]. Telecommunications Science, 2023, 39(6): 52-60.
[6]	Tao ZOU, Huifeng ZHANG, Wanxin GAO, Qi XU, Congqi SHEN, Jun ZHU, Zhongxia PAN, Xingchang GUO. Research on polymorphic network application technology oriented intelligent manufacturing [J]. Telecommunications Science, 2023, 39(6): 61-72.
[7]	Yaoyu HE, Chao ZHANG. Airworthiness analysis of low earth orbit satellite communication technology for UAV application [J]. Telecommunications Science, 2023, 39(6): 96-104.
[8]	Fubin WANG, Shiyuan SUN, Menghui WANG, Fang YANG, Xiaofei WANG, Jian SONG. Key technologies of visible light communications with multiple LEDs [J]. Telecommunications Science, 2023, 39(5): 3-10.
[9]	Tianyang MA, Xiongbin CHEN, Yiwu XU. Zero power light labeling based on visible light communication [J]. Telecommunications Science, 2023, 39(5): 20-27.
[10]	Sicong LIU, Danping SU, Tiankuo WEI, Xianyao WANG. Multi-node cooperation based robust visible light intelligent positioning [J]. Telecommunications Science, 2023, 39(5): 28-41.
[11]	Jiawei HU, Xiaoqian LIU, Xinke TANG, Yuhan DONG. Trajectory planning of UUV-assisted UWOC systems based on DQN [J]. Telecommunications Science, 2023, 39(5): 42-47.
[12]	Xiaoqian LIU, Xinke TANG, Yuhan DONG. Spatial channel modeling for MIMO underwater wireless optical links [J]. Telecommunications Science, 2023, 39(5): 48-56.
[13]	Sihong ZHANG, Jian ZHANG. Impact and countermeasures of generative AI represented by ChatGPT on the telecom industry [J]. Telecommunications Science, 2023, 39(5): 67-75.
[14]	Xiaoliang MA, Ying LIU, Dequan DU, Lingling AN. Key technologies and development trends of intelligent customer service for operators [J]. Telecommunications Science, 2023, 39(5): 76-89.
[15]	Xinxin TANG, Xuewen ZENG, Zhiyuan LING, Lei SONG. Overview of programmable data plane technology [J]. Telecommunications Science, 2023, 39(4): 1-16.