Openflow-based dynamic security isolation system and method for private cloud network

Abstract

The invention relates to the technical field of cloud computing security, and in particular relates to an Openflow-based dynamic security isolation system and method for a private cloud network. The system disclosed by the invention comprises a virtual machine operation platform, a virtualized user operation platform and a virtual network connection platform; the virtual machine operation platform is used for operating virtual machines to load different types of applications and allow the virtual machines of the applications to be randomly distributed on a physical machine; the virtualized user operation platform is used for a user to access back-end application services by using different terminals; and the virtual network connection platform is used for isolating and dynamically adjusting the private cloud network according to requirements by using an Openflow technology. According to the invention, the private cloud network is designed in combination with the Openflow technology; the problems that the traditional isolation method is too thick in isolation granularity and non-flexible can be solved; and the dynamic security isolation system and method provided by the invention can be used for isolating the private cloud network dynamically and securely.

Description

technical field [0001] The invention relates to the technical field of cloud computing security, in particular to an Openflow-based private cloud network dynamic security isolation system and an isolation method. Background technique [0002] With the popularity of the cloud computing model, many organizations hope to build a private cloud. The construction of a private cloud undoubtedly brings many benefits to the IT department; such as the centralized management of information resources and the more efficient use of IT infrastructure. However, while bringing these advantages, some new problems will arise because the private cloud will make some adjustments to the network architecture, which are mainly reflected in the following points: [0003] 1) The centralized deployment of computing resources makes the problem of security isolation increasingly prominent. First of all, in the intranet, different types of applications (such as business applications, financial applicati...

AI Technical Summary

Problems solved by technology

[0006] One of the technical problems solved by the present invention is to provide an Openflow-based private cloud network dynamic security isolation system, which solves the problem that the isolation granularity of the traditional isolation method is too coarse and inflexible

[0007] The second technical problem solved by the present invention is to provide an Openflow-based private cloud network dynamic security isolation method to solve the problem that the isolation granularity of the traditional isolation method is too coarse and inflexible

Images