System and method for auditing cloud computing data center based on SDN

Abstract

The invention discloses a system for auditing a cloud computing data center based on an SDN. The system comprises a core management module, a system basic function module and a linkage interface for connecting the system with other safety equipment or virtual machines. The core management module is the core of the whole system and comprises an SDN controller management platform module, an auditing virtual machine management platform module and an auditing virtual machine safety guarantee module. The system basic function module conducts coordinated management on multiple controllers in a cloud data center environment and comprises a switch interface communication module, a controller synchronization module, a distributed management module, a fault recovery module and a redundant backup module. The linkage interface for connecting the system with other safety equipment or virtual machines is used for connecting the system for auditing the cloud computing data center based on the SDN with other auditing virtual safety management platforms or other network safety products. According to the system and method, customizable and extensional virtual auditing services are provided in the cloud computing data center under the condition that normal operation of the services is not affected.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an audit system and method of an SDN-based cloud computing data center. Background technique [0002] At present, my country's cloud computing is in the development stage, and data security is an important factor hindering its development. There are risks involved when delivering data to the cloud, and effective measures such as auditing (mentioned in the CSA Cloud Security Guidelines) are required to secure virtual infrastructure and web applications. However, due to the introduction of virtualization technology, the traditional division of network boundaries has been broken; and the rapid change in the number of virtual machines also requires corresponding rapid security protection. And these are the traditional audit methods can not do. [0003] Therefore, for government and enterprise users who adopt virtualization-based cloud platform architecture to build IT envi...

AI Technical Summary

Problems solved by technology

[0007] This invention requires an agent to be installed on each host to do the auditing work, which consumes the host's own resources

In addition, when the host crashes (such as poisoning, crash, etc.), the agent stops working, which will affect the continuity and completeness of the audit

Images