基于拟态架构的内生安全云数据中心关键技术和实现方法

doi:10.11959/j.issn.1000-0801.2021056

Abstract

Abstract:

Cloud data center is the representative of the new generation of information infrastructure, and its security has become the focus of attention in recent years, which is of great significance.Based on the analysis of the current cloud security situation, the security architecture, key technologies, and implementation methods of the cloud data center through the emerging concept of endogenous security were explored, hoping to use the mimic structure to solve the endogenous safety and security problems such as vulnerabilities and backdoors that were difficult to deal with by the existing means.Moreover, the endogenous security architecture of cloud data centers and related key technologies were proposed, with the mode and trend of mimic transformation.In the future, endogenous safety and security cloud data centers will provide practical solutions for the construction of a new generation of information infrastructure, which may accelerate the technology application and promotion of the cloud service model.

Key words: endogenous safety and security, cloud data center, mimic structure, mode and trend of mimic transformation

CLC Number:

TP393

Fan ZHANG, Guangwei XIE, Wei GUO, Hongchao HU, Ruyun ZHANG, Wenyan LIU. Key technologies and implementation methods of endogenous safety and security cloud data center based on mimic architecture[J]. Telecommunications Science, 2021, 37(3): 39-48.

Figures/Tables 14

References 11

[1]	MAJUMDAR S , MADI T , JARRAYA Y ,et al. Cloud security auditing:major approaches and existing challenges[C]// Integer Programming and Combinatorial Optimization.[S.l.:s.n.], 2019: 61-77.
[2]	EL-ATTY A , SAIED M , KOLHAR ,et al. Cloud data auditing techniques with a focus on privacy and security[J]. IEEE Security ＆ Privacy, 2017,15(1): 42-51.
[3]	DAVE D , MERULIYA N , GAJJAR T D ,et al. Cloud security issues and challenges[J]. Big Data Analytics, 2018: 499-514.
[4]	俞能海, 郝卓, 徐甲甲 ,等. 云安全研究进展综述[J]. 电子学报, 2013,41(2): 371-381.
	YU N H , HAO Z , XU J J ,et al. Review of cloud computing security[J]. Acta Electronica Sinica, 2013,41(2): 371-381.
[5]	陈钟, 孟宏伟, 关志 . 未来互联网体系结构中的内生安全研究[J]. 信息安全学报, 2016,1(2): 10-13.
	CHEN Z , MENG H W , GUAN Z . Research on intrinsic security in future internet architecture[J]. Journal of Cyber Security, 2016,1(2): 10-13.
[6]	邬江兴 . 网络空间内生安全——拟态防御与广义鲁棒控制[M]. 北京:科学出版社. 2020.
	WU J X . Endogenous security in cyberspace ——mimic defense and generalized robust control[M]. Beijing: Science Press, 2020.
[7]	刘杨, 彭木根 . 6G 内生安全:体系结构与关键技术[J]. 电信科学, 2020,36(1): 11-20.
	LIU Y , PENG M G . 6G endogenous security:architecture and key technologies[J]. Telecommunications Science, 2020,36(1): 11-20.
[8]	江伟玉, 刘冰洋, 王闯 . 内生安全网络架构[J]. 电信科学, 2019,35(9): 26-34.
	JIANG W Y , LIU B Y , WANG C . Network architecture with intrinsic security[J]. Telecommunications Science, 2019,35(9): 26-34.
[9]	宋克, 刘勤让, 魏帅 ,等. 基于拟态防御的以太网交换机内生安全体系结构[J]. 通信学报, 2020,41(5): 22-30.
	SONE K , LIU Q R , WEI S ,et al. Endogenous security architecture of ethernet switch based on mimic defense[J]. Journal on Communications, 2020,41(5): 22-30.
[10]	普黎明, 刘树新, 丁瑞浩 ,等. 面向拟态云服务的异构执行体调度算法[J]. 通信学报, 2020(3): 17-24.
	PU L M , LIU S X , DING R H ,et al. Heterogeneous executor scheduling algorithm for mimic cloud service[J]. Journal on Communications, 2020(3): 17-24.
[11]	邬江兴 . 网络空间拟态防御研究[J]. 信息安全学报, 2016,1(4): 1-10.
	WU J X . Research on cyber mimic defense[J]. Journal of Cyber Security, 2016,1(4): 1-10.

Metrics

Recommended 0

No Suggested Reading articles found!

镜像文件/云平台	OpenStack	CloudStack
qcow2	支持	支持
raw	支持	支持
img	支持	支持
vdi	支持	支持
vmdk	支持	支持
vpc	支持	支持

[1]	Shengchao XU, Maohua XIONG, Tianqi ZHOU. Approach of glowworm swarm optimization based virtual machine placement [J]. Telecommunications Science, 2022, 38(3): 172-182.
[2]	Yufeng LI, Chenhong CAO, Jiangtao LI, Peng WANG. An endogenous safety and security technical framework inspired by biological immune system [J]. Telecommunications Science, 2021, 37(3): 49-56.
[3]	Ruyun ZHANG, Heyuan LI, Shunbin LI. Mimic security scheduling algorithm for industrial control under limited heterogeneous resource constraints [J]. Telecommunications Science, 2021, 37(3): 57-65.
[4]	Hongyi ZHU, Xiaoyuan LU, Yi LI. Management technologies of cyberspace endogenous safety and security test site [J]. Telecommunications Science, 2021, 37(3): 66-74.
[5]	Donghan JIANG,Haitao LIN. Virtual machine placement algorithm based on cuckoo search [J]. Telecommunications Science, 2017, 33(10): 90-98.
[6]	Hanjiang LIU,Liang OU,Wenhua CHEN,Hong TANG. Bearing technology across the data center based on SDN [J]. Telecommunications Science, 2016, 32(3): 28-34.
[7]	Hui ZHAO,Ming DING,Qingsong CHENG,Ling LU,Chensheng KONG. Application of SDN and NFV technology in the cloud data center [J]. Telecommunications Science, 2016, 32(1): 144-151.
[8]	Pang Songtao. Resource Scheduling for Cloud Data Center Based on Data Mining in Smart Grid [J]. Telecommunications Science, 2015, 31(3): 2015084-.
[9]	Yongbing Fan,Tian Chen,Nan Chen,Zhilan Huang,Cui'e Lv. Research on Virtual Machine Placement in Cloud Data Center [J]. Telecommunications Science, 2015, 31(2): 140-146.
[10]	Hongjian Li,Yu Dai,Rui Liu,Yi Jiang. Energy-Efficient Virtual Machine Migration and Consolidation Algorithm in Cloud Data Center [J]. Telecommunications Science, 2015, 31(1): 65-71.
[11]	Li Hongjian,Dai Yu,Liu Rui and Jiang Yi. Energy-Efficient Virtual Machine Migration and Consolidation Algorithm in Cloud Data Center [J]. Telecommunications Science, 2015, 31(1): 2015033-.
[12]	Dan Li,Fangming Liu,Deke Guo,Yuan He,Xiaomeng Huang. Fundamental Theory and Key Technology of Software Defined Cloud Data Center Network [J]. Telecommunications Science, 2014, 30(6): 48-59.
[13]	Pingping Wang. Research on Wisdom Tourism Demand and Architecture of Cloud Platform [J]. Telecommunications Science, 2014, 30(11): 61-65.
[14]	Yongbing Fan,Shengyong, Ding,Nan Chen. A General Network Architecture Design of Large-Scale Cloud Data Center Based on Service Switch [J]. Telecommunications Science, 2013, 29(10): 1-4.
[15]	Huazhao Liu,Xuefeng Chen,Qian Yu. Fusion of IDC Operation Support System Design and Analysis [J]. Telecommunications Science, 2013, 29(1): 143-148.

Key technologies and implementation methods of endogenous safety and security cloud data center based on mimic architecture

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 14

References 11

Related Articles 15

Metrics

Recommended 0