An adaptive cloud computing environment virtual security domain access control method and system

Abstract

The present invention relates to a method and system for controlling access to a virtual security domain in an adaptive cloud computing environment. The method deploys a virtual security gateway device on a virtual machine management layer, and implements the virtual security gateway device with a cloud security policy synchronization center in the cloud computing environment. Interact to obtain security policy information, and monitor the network communication behavior of the virtual machine on the virtual machine management layer according to the security policy, and directly perform access control on the network communication data packets inside the same physical machine; for network communication across physical machines The security control package is added to the data package, and the cross-physical machine adaptive access control is performed through the security control package and the security feedback package containing the dynamic adjustment access control policy information. The method and system can realize the fine-grained access control function for communication between different virtual machines on the same physical machine or different physical machines, and can dynamically adjust access control policies to realize adaptive cloud computing environment virtual security domain access control .

Description

technical field [0001] The invention relates to the technical field of data information security, in particular to an access control method and system for a virtual security domain in an adaptive cloud computing environment. Background technique [0002] Cloud computing is a delivery model of IT resources and services, which can achieve anytime, anywhere, convenient and on-demand access to the required resources (such as network, server, storage, applications, services, etc.), these resources can be rapidly provisioned and released with minimal administrative cost or service provider intervention. Cloud computing has the characteristics of multi-tenancy, centralization, and virtualization, which cause different business systems of different tenants to run on the same cloud computing platform, which cannot be effectively isolated physically. To ensure security isolation between different tenants, or security isolation between different service systems of the same tenant, dif...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem that traditional security access control methods based on physical devices are not suitable for virtual security domain protection in cloud computing environments, the present invention provides an adaptive cloud computing environment virtual security domain access control method, which is deployed in the virtual machine management layer Virtual security gateway device to control access to network communication data

Images