Security policy configuration system and method for virtual security gateway

Abstract

The embodiment of the invention discloses a security policy configuration system and method for a virtual security gateway. The method comprises the steps that user security policies are generated according to user configuration; with virtual network interface cards as minimum units, the user security policies of all users are split into minimum unit user security policies respectively; a user information base is inquired for obtaining information of a virtual machine which the virtual network interface cards belong to, information of a physical machine which the virtual machine belongs to, and VSG information deployed on the physical machine, and obtaining VSG security policies from the user information base, wherein the information of the virtual machine, the information of the physical machine and the VSG information correspond to all the minimum unit user security policies respectively; with the virtual network interface cards as the minimum units, all the VSG security policies are split into minimum unit VSG security policies; the minimum unit user security policies are utilized for updating the minimum unit VSG security policies, the updated minimum unit VSG security policies are combined with VSGs as units to generate the latest VSG security policies, and the latest VSG security policies are issued to all the VSGs. According to the system and the method, the VSG security policies of a Hypervisor mode can be configured from user dimensionality.

Description

technical field [0001] The invention relates to cloud computing virtual security protection technology, in particular to a security policy configuration system and method for a virtual security gateway. Background technique [0002] Virtual Security Gateway (Visual Security Gateway, VSG) is an emerging cloud computing security product. VSG is deployed on the cloud platform in the form of a virtual machine, which can provide security detection and control for network communication between virtual machines hosted on the cloud platform. At present, there are various implementation methods of VSG products in the industry, among which VSG in hypervisor mode is one of the most promising implementation methods. The implementation principle of VSG in hypervisor mode is as follows: Some mainstream virtualization software providers open application programming interfaces (APIs) to third-party security partners. , so that third-party security partners can couple their security gatewa...

AI Technical Summary

Problems solved by technology

Therefore, the security policy of VSG cannot be configured and managed from the user's perspective, which will make the operation and maintenance of VSG very inconvenient, and it is difficult to open VSG management authority to users, and VSG cannot provide users with better personalized network communication security monitoring service

Images