Access control method and system of self-adaptation cloud computing environment virtual security domain

Abstract

The invention relates to an access control method and system of a self-adaptation cloud computing environment virtual security domain. The access control method of the self-adaptation cloud computing environment virtual security domain comprises the steps of (1) deploying a virtual security gateway device on a virtual machine management layer, carrying out interaction with a cloud security policy sync center in a cloud computing environment through the virtual security gateway device to obtain security policy information, monitoring a network communication behavior of a virtual machine on the virtual machine management layer according to a security policy, directly carrying out access control on network communication data packets inside the same physical machine, and (2) adding a security control packet to a network communication data packet across the physical machine, and carrying out self-adaptation access control across the physical machine through the security control packet and a security feedback packet which contains access control policy dynamic-adjustment information. The access control method and system of the self-adaptation cloud computing environment virtual security domain can achieve the function of carrying out fine-grained access control on communication among different virtual machines on the same physical machine or different physical machines, an access control policy can be adjusted in a dynamic mode, and access control over the self-adaptation cloud computing environment virtual security domain can be achieved.

Description

technical field [0001] The invention relates to the technical field of data information security, in particular to an access control method and system for a virtual security domain in an adaptive cloud computing environment. Background technique [0002] Cloud computing is a delivery model of IT resources and services, which can achieve anytime, anywhere, convenient and on-demand access to the required resources (such as network, server, storage, applications, services, etc.), these resources can be rapidly provisioned and released with minimal administrative cost or service provider intervention. Cloud computing has the characteristics of multi-tenancy, centralization, and virtualization, which cause different business systems of different tenants to run on the same cloud computing platform, which cannot be effectively isolated physically. To ensure security isolation between different tenants, or security isolation between different service systems of the same tenant, dif...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem that traditional security access control methods based on physical devices are not suitable for virtual security domain protection in cloud computing environments, the present invention provides

Images