Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

查看全文 作　　者：Zhen [1]Chen;Wenyu [2]Dong;Hang [3]Li;Peng [4]Zhang;Xinming [5]Chen;Junwei [1]Cao

机构地区：[1]Research Institute of Information Technology and Tsinghua National Lab for Information Science and Technology Tsinghua University;[2]Department of Computer Science and Technology Tsinghua University;[3]Department of Computer Science and Technology PLA Univ. of Info. & Eng.;[4]Department of Electronic and Information Engineering Xi’an Jiaotong University;[5]Department of Electrical and Computer Engineering University of Massachusetts

出　　处：《Tsinghua Science and Technology》索引2014年第19卷第1期,共13页

基　　金：supported in part by the National Key Basic Research and Development(973)Program of China(Nos.2013CB228206 and 2012CB315801);the National Natural Science Foundation of China(Nos.61233016 and 61140320);supported by the Intel Research Council with the title of 'Security Vulnerability Analysis based on Cloud Platform with Intel IA Architecture';Huawei Corp 摘　　要：A data center is an infrastructure that supports Internet service. Cloud computing is rapidly changing the face of the Internet service infrastructure, enabling even small organizations to quickly build Web and mobile applications for millions of users by taking advantage of the scale and flexibility of shared physical infrastructures provided by cloud computing. In this scenario, multiple tenants save their data and applications in shared data centers, blurring the network boundaries between each tenant in the cloud. In addition, different tenants have different security requirements, while different security policies are necessary for different tenants. Network virtualization is used to meet a diverse set of tenant-specific requirements with the underlying physical network, enabling multi-tenant datacenters to automatically address a large and diverse set of tenants requirements. In this paper, we propose the system implementation of vCNSMS, a collaborative network security prototype system used in a multi-tenant data center. We demonstrate vCNSMS with a centralized collaborative scheme and deep packet inspection with an open source UTM system. A security level based protection policy is proposed for simplifying the security rule management for vCNSMS. Different security levels have different packet inspection schemes and are enforced with different security plugins. A smart packet verdict scheme is also integrated into vCNSMS for intelligence flow processing to protect from possible network attacks inside a data center network. 关键词：数据中心网络安全计算协作应用程序共享基础设施原型系统物理网络

相关文献

参考文献（37）
引证文献（6）
耦合文献（0）

参考文献(37)

引证文献(6)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

参考文献(37)

引证文献(6)

用户提示