Network security traffic platform based on software definition

Abstract

The invention relates to a network security traffic platform based on software definition. The platform is characterized by including an application layer, a management layer and a data layer; the application layer comprises a network application, network services and a custom application interface; the application layer can directly provide an application process with services and is used for allowing mutual communication of multiple system application processes and finishing services required by processing of a series of services; the management layer comprises an SDN (software defined network) controller; the SDN controller separates control rights from network equipment and centrally manage the control rights; the data layer comprises a fire wall, a web application protective system WAF, and an IDS (intrusion detection system); the data layer is available for detecting and controlling access data. The platform has the advantages that the defects in resource management and security protection in the SDN environment can be solved and the security protection need of the environment with high network traffic, diversified security needs and high requirement on security trust degree is met.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a software-defined network security flow security platform. Background technique [0002] After the network in the traditional IT architecture is deployed and launched according to business needs, if the business needs change, it is very cumbersome to re-modify the configuration on the corresponding network devices (routers, switches, firewalls). In the rapidly changing business environment of the Internet / mobile Internet, high stability and high performance of the network are not enough to meet business needs, and flexibility and security are more critical. What the software-defined network (SDN) does is to separate the control rights on the network devices and manage them by a centralized controller without relying on the underlying network devices (routers, switches, firewalls), shielding the differences from the underlying network devices, The control right is compl...

AI Technical Summary

Problems solved by technology

At present, there are some defects in resource management and security protection based on the software-defined network environment, and it is difficult to meet the security protection requirements in an environment with large network traffic, diverse security requirements, and high security reliability requirements.

Images