Flow attack defense system based on SDN cloud security function service tree model

Abstract

The invention discloses a flow attack defense system based on an SDN cloud security service tree model. The system comprises a cloud security resource management module, a cloud security resource scheduling module, a security service tree policy customization module, a security service chain path customization module and a global security data monitoring module. By utilizing the flexibility of separation of a data plane and a control plane of an SDN, and easy extensibility provided by a virtual cloud environment, a cloud security service tree framework model is built. Flow to be detected is guided into an entry of a cloud security service tree; deep packet analysis of coarse granularity is carried out at the entry; if the flow is normal flow, the flow is rapidly forwarded to a destinationreceiver; and if the flow is abnormal flow, the flow is introduced into security service chains of subsequent tree branches to carry out fine granularity detection and processing. By utilizing massivecloud security resources and flexible resource scheduling, various granularities of network flow attacks of unknown types are detected and an attack elimination strategy capable of being flexibly customized is provided.

Description

technical field [0001] The present invention relates to the field of network technology, and more specifically, relates to a traffic attack defense system that implements a cloud security service tree model on an SDN network. Background technique [0002] With the rapid development of cloud computing and virtualization, more and more governments and enterprises reduce costs and improve business flexibility by deploying their servers in the cloud, but this also brings a series of new problems and challenge. With the collapse of traditional network security boundaries, the interaction between various cloud services carried by host machines is not sufficiently secure, and the security isolation between various cloud services still needs to be paid attention to. Furthermore, the security requirements required by each tenant and each business are also different. The security situation of a more complex cloud computing environment urgently requires an overall solution capable of...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of cloud computing and virtualization, more and more governments and enterprises reduce costs and improve business flexibility by deploying their servers in the cloud, but this also brings a series of new problems and challenges

With the disintegration of traditional network security boundaries, the interaction between various cloud services carried by hosts is not sufficiently secure, and the security isolation between various cloud services still needs to be paid attention to

Images